Your network consists of a single Active Directory forest that contains two domains named contoso.com and EU.contoso.com. All network servers run Windows Server 2003 Service Pack 2 (SP2).The contoso.com domain contains a domain local group named Contoso-HR. The EU.contoso.com domaincontains a domain local group name EU-HR.On a server named Server1 in the contoso.com domain, you create a shared folder named Share You assign the Contoso-HR group the Read permission for ShareYou discover that you cannot assign permissions on Share1 to the EU-HR group.You need to ensure that the members of the EU-HR group have the Read permission on ShareWhich two actions should you perform? （）(Each correct answer presents part of the solution. Choose two.)
A. Add the EU-HR group to Contoso-HR.
B. Change the scope of the EU-HR group to global.
C. Change the scope of the Contoso-HR group to universal.
D. Configure a shortcut trust between the EU and the Contoso domains.
参考答案：AB
