Your network consists of a single Active Directory forest that contains the domains shown in the following table. You create a universal security group named Contoso-All in the Contoso domain. You plan to use Contoso-All to assign permissions only on servers in the contoso.com domain. You add a group named Region1-All in the Region1 domain to Contoso/Contoso-All and receive the error message shown in the exhibit. (Click the Exhibit button.) You need to ensure that members of Region1/Region1-All can access resources that have been assigned to Contoso/Contoso-All. What should you change? （）

• A、Contoso/Contoso-All to a domain local security group
• B、Contoso/Contoso-All to a global security group
• C、Region1/Region1-All to a domain local security group
• D、Region1/Region-All to a universal distribution group