A: A domain is the organizational level that Active directory and Group Policy will be used for identity/policy management for a certain set of users/groups/devices. A forest is the organizational level above the domain and a forest can contain multiple domains for example accounting.contonso.com can be one domain and operations.contonso.com can be another domain within the same forest.