You can build membership queries for collections based on Active Directory data, like Organizational Units $($OUs$)$ and Security Groups $($SGs$).$ When defining membership queries for a single collection, which of the following statements is true?