Which statement best defines a domain in Active Directory?

Which statement best defines a domain in Active Directory?

• A. A logical group of network resources under a domain controller
• B. A physical server
• C. A subset of users only
• D. A user account

Answer: (A)

A domain in Active Directory is a logical boundary that groups network resources—such as users, computers, and groups—under a domain controller, enabling centralized authentication and policy management. This means all objects within the domain share a common directory and security policies, and authentication is handled consistently by the domain controllers. A physical server is not the domain itself; domain controllers host the domain, but the domain is the administrative and security boundary, not hardware. A subset of users only and a single user account are also not accurate: the domain encompasses many object types, not just users, and an individual user account is just one object within the domain.

A domain in Active Directory is a logical boundary that groups network resources—such as users, computers, and groups—under a domain controller, enabling centralized authentication and policy management. This means all objects within the domain share a common directory and security policies, and authentication is handled consistently by the domain controllers.

A physical server is not the domain itself; domain controllers host the domain, but the domain is the administrative and security boundary, not hardware. A subset of users only and a single user account are also not accurate: the domain encompasses many object types, not just users, and an individual user account is just one object within the domain.