Exam 70-410 topic 3 question 75 discussion

DRAG DROP -
Your network contains an Active Directory domain named contoso.com. The domain contains a member server named Server1. Server1 runs Windows Server
2012 R2 and has the File and Storage Services server role installed.
On Server1, you create a share named Documents. The Share permission for the Documents share is configured as shown in the following table.

The NTFS permission for the Documents share is configured as shown in the following table.

You need to configure the Share and NTFS permissions for the Documents share.
The permissions must meet the following requirements:
✑ Ensure that the members of a group named Group1 can read files and run programs in Documents.
✑ Ensure that the members of Group1 can modify the permissions on only their own files in Documents.
✑ Ensure that the members of Group1 can create folders and files in Documents.
✑ Minimize the number of permissions assigned to users and groups.
How should you configure the permissions?
To answer, drag the appropriate permission to the correct location. Each permission may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Select and Place:

Suggested Answer:
Granting a user Full Control NTFS permission on a folder enables that user to take ownership of the folder unless the user is restricted in some other way. Be cautious in granting Full Control.
If you want to manage folder access by using NTFS permissions exclusively, set share permissions to Full Control for the Everyone group.
NTFS permissions affect access both locally and remotely. NTFS permissions apply regardless of protocol. Share permissions, by contrast, apply only to network shares. Share permissions do not restrict access to any local user, or to any terminal server user, of the computer on which you have set share permissions. Thus, share permissions do not provide privacy between users on a computer used by several users, nor on a terminal server accessed by several users.
Reference: http://technet.microsoft.com/en-us/library/cc754178.aspx