What are the three types of Security Groups?

What are the three types of Security Groups?

• A. Universal, Global, and Domain Local
• B. Local, Global, and Universal
• C. Domain Local, Local, and Global
• D. Global, Local, and User-based

Answer: (A)

Security group scope in Active Directory determines where the group can include members from and where its permissions can be applied. The three valid scopes are Global, Domain Local, and Universal. Global groups gather members from a single domain and are typically used to organize users by role within that domain, while their memberships can be used to grant access in other domains by nesting the group into domain local or universal groups. Domain Local groups are used to assign permissions to resources within a single domain, and they can include members from any domain. Universal groups can contain members from any domain in the forest and are convenient for granting access across multiple domains, with membership information replicated via the global catalog. Thus, the three types are Universal, Global, and Domain Local. Other wording like “Local” or “User-based” isn’t a recognized security group scope in Active Directory.

Security group scope in Active Directory determines where the group can include members from and where its permissions can be applied. The three valid scopes are Global, Domain Local, and Universal.

Global groups gather members from a single domain and are typically used to organize users by role within that domain, while their memberships can be used to grant access in other domains by nesting the group into domain local or universal groups. Domain Local groups are used to assign permissions to resources within a single domain, and they can include members from any domain. Universal groups can contain members from any domain in the forest and are convenient for granting access across multiple domains, with membership information replicated via the global catalog.

Thus, the three types are Universal, Global, and Domain Local. Other wording like “Local” or “User-based” isn’t a recognized security group scope in Active Directory.