Which groups can you add to Group4?

Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10.

You have the groups shown in the following table.

Which groups can you add to Group4?
A . Group2 only
B . Group1 and Group2 only
C . Group2 and Group3 only
D . Group1, Group2, and Group3

View Answer

Answer: D

Explanation:

What is group nesting?

AD group nesting, simply put, is the process of putting one group inside another group. Nested groups inherit the permissions and privileges of the group they are put under, and hence this makes privilege administration easier. However, not all groups can be nested within other groups, and this depends on the types of groups in AD, and their scope of nesting.

The following table contains the various groups and their scopes.

* Domain local groups

Members who can be part of this group:

Accounts and global groups, from any domain in the same forest or any trusted domains

Universal groups from any domain in the same forest

Other Domain Local groups from the same domain

* Etc.

Reference: https://www.windows-active-directory.com/nesting-groups-in-active-directory.html