Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest and the domains is Windows Server 2008 R2.
You have a global group named Group1 in the contoso.com domain. Group1 contains the user accounts in the contoso.com.
You need to ensure that you can add the user accounts in the fabrikam.com domain to Group1.
What should you do?
A. Assign the Domain Controllers group in fabrikam.com permissions to Group1.
B. Modify the scope of Group1 to Universal.
C. Raise the domain functional level contoso.com to Windows Server 2016.
D. Raise the domain functional level of fabriakm.com Windows Server 2016.
You can add GLOBAL to Universaland to Local domain.
Here we have only Universal but in real life you may add directly to domain local.
80given answer is correct.
Universal? or domain local?
You can use both, but “cheaper” will be DL.
The question focuses that you can`t add objects from domain A to GLOBAL group of domain B.
You can add objects from the same domain to GLOBAL group and then nest it to DOmain Local or Universal group in another domain.