What?s the difference between local, global and universal groups?

Domain local groups assign access permissions to global domain groups for local domain resources. Global groups provide access to resources in other trusted domains. Universal groups grant access to resources in all trusted domains.:global groups are stored in the domain, yet can be used throughout the forest? And universal groups are stored in the forest, and used throughout the forest as well. Both of these are added to domain local groups to be granted permissions in that domain. Am I correct?
Category:Java Security Interview Questions