StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · AD DS · AD DS | Create and manage AD DS security principals

Practice question 40 of 506 · medium

Which two statements about multi-forest group design are correct? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Foreign security principals represent external SIDs locally
  2. B.Resource-domain domain-local groups can hold eligible trusted external groups
  3. C.Universal groups automatically accept users from every trusted forest
  4. D.A validated trust automatically renews existing user access tokens
Show the answer and explanation

✓ Correct answers

  • Foreign security principals represent external SIDs locally
  • Resource-domain domain-local groups can hold eligible trusted external groups

Foreign security principals represent external identities, and domain-local resource groups can incorporate eligible trusted principals. Universal membership remains within its forest; trust validation does not refresh already issued logon tokens.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.