Shared Vs NTFS Security

Could someone take a moment and look at Q 78 on this list of practice tests?

I am not sure as to why "A" is the correct answer. I thought that if NTFS
permissions that are more restrictive will override share permissions, and
that the NTFS "Read" permissions on d:\userdata would be in effect.

I don't like any other answer, either.

Thanks for your time.




http://www.scribd.com/doc/16723935/M...2009-IMPORTANT

On 09/02/2010 14:37, Buck Turgidson wrote:
> Could someone take a moment and look at Q 78 on this list of practice tests?
>
> I am not sure as to why "A" is the correct answer. I thought that if NTFS
> permissions that are more restrictive will override share permissions, and
> that the NTFS "Read" permissions on d:\userdata would be in effect.
>
> I don't like any other answer, either.

I don't like the fact that it looks like a braindump.

I had a look and the answer is correct. Looks like the braindumpers
forgot to include any explanations with the answers which makes them a
little more useless :-)

How about you try and work out for yourself why the answer is correct.
This might help:

http://www.ntfs.com/ntfs-permissions-share.htm


Braindumps violate the MCP NDA. Don't use them.


--
Chris M.
MBCS CITP
MCSE | MCSA | MCTS | MCDST | CCNA

Believe me, I am all for figuring things out. But when a question is
vaguely worded, it is difficult. The NTFS permissions are more restrictive
in this case, and will narrow the share permissions.

I guess the loophole is if another folder is added to the share.

On 09/02/2010 19:12, Buck Turgidson wrote:
> Believe me, I am all for figuring things out. But when a question is
> vaguely worded, it is difficult. The NTFS permissions are more restrictive
> in this case, and will narrow the share permissions.
>
> I guess the loophole is if another folder is added to the share.

I'll be nice and explain it:

The question isn't vaguely worded if you look at the requirements. I
can't be bothered to type them out so I'll just refer to them as 1, 2 and 3:

Requirement 3 is the key one in this case. Because Sales and Marketing
have full NTFS permissions on their respective folders, and
Authenticated Users have full control of the share, Sales and Marketing
will therefore be able to modify NTFS permissions on the files in their
folders.

Reducing the share permissions to Change instead of Full Control will
allow the Sales and Marketing groups to create/modify/delete files in
their respective folders (satisfying requirements 1 and 2), but not
change the NTFS permissions even though they have Full Control over the
folder (satisfying requirement 3)

Stop using the braindumps and spend more time on the newsgroups asking
questions, it'll probably be more beneficial :-)

--
Chris M.
MBCS CITP
MCSE | MCSA | MCTS | MCDST | CCNA