exam questions

Exam MD-100 All Questions

View all questions & answers for the MD-100 exam

Exam MD-100 topic 3 question 15 discussion

Actual exam question from Microsoft's MD-100
Question #: 15
Topic #: 3
[All MD-100 Questions]

HOTSPOT -
You have a computer that runs Windows 10 and contains the folders shown in the following table.

You create the groups shown in the following table.

On FolderA, you disable permission inheritance and select the option to remove all inherited permissions. To each folder, you assign the NTFS permissions shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Inheritance was turned off for FolderA and to all inherited permissions have been removed. Therefore, permissions on FolderA do not filter down to FolderB and
FolderC.
Reference:
https://docs.microsoft.com/en-us/windows/security/identity-protection/access-control/access-control

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Telechipz
Highly Voted 2 years, 9 months ago
For those of you that were utterly confused like me: Yes, inheritance is disabled on Folder A. That just means that Folder A is a clean slate, it is not getting its permissions from the folder ABOVE it. It is starting with its own permissions. So B and C will still get (inherit) their permissions from Folder A. I hope this helps someone. Not sure why I confused myself like that. (To further add as an example, if it said Inheritance was turned off on Folder B, THEN that would mean that B would ONLY have "write to Group 3" permissions. In addition, C would still have permissions from both B and C. Also, if it said Inheritance was turned off on Folder B AND C, THEN that would mean that B and C would ONLY have those explicit permissions listed. If inheritance was turned off on all 3 folders, then they would all only have their listed permissions)
upvoted 19 times
Skarface
2 years, 5 months ago
Thanks for the explanation. I was confused and I thought that B and C did not inherit permissions but thanks to your explanation I have realized that this is not the case.
upvoted 1 times
...
...
forummj
Highly Voted 4 years, 7 months ago
I believe this should be Yes, Yes, No. User3 never receives a Modify permission via inheritance so can't delete any files. I have tested this, if I'm wrong, please explain why, thank you :)
upvoted 18 times
Teketi
4 years, 2 months ago
User 3 is part of group 1. Group 1 have the modify permission
upvoted 1 times
ercluff
4 years, 2 months ago
Incorrect. User 3 is a member of Group 2 and Group 3. User 1 has Modify permissions to Folder A, not C.
upvoted 3 times
...
...
Divy95
4 years, 5 months ago
As mentioned in the explanation, inheritance is turned off for folder A not for folders B & C. That means, folder C receives folder A and B's permissions because of inheritance. User 3 is a member of both groups 2 and 3. Also note that group 2 has write permission for folder B. Therefore, User 3 can indeed delete files in folder C. (NTFS permissions are cumulative afterall)
upvoted 9 times
Duyons
4 years, 5 months ago
User3 does not have a modify permission - If this would be the case the answer would be YES. User 3 is a member of Group 2 and 3. The only permission granting modify is against group1 which User 1 and 2 are belong that's the reason the answers are 1.YES, 2.YES, 3.NO.
upvoted 8 times
Duyons
4 years, 5 months ago
I have just tested a minute ago. User 3 can't delete all files on FolderC.
upvoted 6 times
AVP_Riga
4 years, 3 months ago
Yes, I tested too. Same result.
upvoted 6 times
...
...
...
BAbdalla
3 years, 9 months ago
does write permission allow file exclusion?
upvoted 1 times
...
...
Kock
2 years, 9 months ago
Está certa. SIM, SIM, Não.
upvoted 1 times
...
lukes2
4 years, 7 months ago
agree with you. Y, Y, N
upvoted 7 times
forummj
4 years, 7 months ago
*delete permissions via inheritance (that's what I should have said, user3 obviously has Modify permissions, but Modify doesn't allow you to delete)
upvoted 2 times
Anthony_2770
4 years, 5 months ago
Modify permissions do allow you to delete. User3 has not got modify permissions on Folder C. Nonetheless Forummj has done an excellent job in this exam and has moved on I believe, but credit to you for your work in this exam. The discussions are very important
upvoted 5 times
...
...
...
...
ChrisC21
Most Recent 2 years, 3 months ago
The given answer is correct and I have tested in a virtual machine. Remember that NTFS permissions will merge down the line. Removing inheritance at Folder A just means that it does not receive permissions from an parent folders. So, at Folder A, user 1 and user 2 get Modify permissions, which does let you delete any folder or file under Folder A. User 3 has only read permission at Folder A. Once we get to Folder B, User 3 now receives the write permission for a total of Read and Write at Folder B, which allows you to add and edit a file, NOT delete it. Deleting files require the modify permission (or there are two special permissions you can set). User 2 does not get anything extra since it already has modify permissions. At Folder C, nothing gets added to User 1 or User 3 since they already had the read permission. Cool little note: If you look closely at the special permissions, you can see that when the "Delete" permission is turned off, Modify is turned off! If you would like a visual guide, right click the folder > advanced > Effective Access and choose your user to see. So, the answers are Y, Y, and N.
upvoted 1 times
...
ChrisC21
2 years, 3 months ago
T Remember that NTF Cool little note: If you look closely at the special permissions, you can see that when the "Delete" permission is turned off, Modify is turned off! If you would like a visual guide, right click the folder > advanced > Effective Access and choose your user to see the effective permissions. So, the answers are Y, Y, and N.
upvoted 1 times
...
JayJay76
2 years, 5 months ago
Can anyone explain to me how user 1 has write permissions in folder C? I get that C inherits permissions from A and B but only users 2 & 3 are in Group 2 which is given the writ3e permission. User 1 is not in any groups that receive write permissions. Am I missing something?
upvoted 1 times
flabezerra
2 years, 4 months ago
If you don't, you need to understand Effective Access. In short, it means that you will see the permissions that are available for the user or machine.
upvoted 1 times
...
flabezerra
2 years, 4 months ago
You have to look into the Advanced Security Settings (Advanced button) and observe that Inheritance began all again from FolderA, when all inheritance was removed. So you'll see FolderB and FolderC getting Inheritance from FolderA. Take a look at the Inherited from tab of FolderB and FolderC. Also, take a look at the Applies to tab from FolderA.
upvoted 1 times
...
...
Henry78
2 years, 8 months ago
folders= A ,B ,C // users= 1 ,2 ,3 A: M(1 ,2) ,R(3) B: M(1 ,2) ,R(3) , W(3) C: M(1 ,2) ,R(3) , W(3)
upvoted 1 times
...
syougun200x
2 years, 8 months ago
I thought No, no, no from the beginning and still think so after reading all the comments here and testing the behavior myself. Permissions are not inherited from A to B. Permissions are inherited from B to C.
upvoted 1 times
...
Kock
2 years, 9 months ago
Sim, Sim, Não, testado.
upvoted 1 times
...
chrys
2 years, 11 months ago
It is Yes, Yes, No. User3 can write via inheritance, but Write does not include Delete. Modify includes Delete, but Write does not.
upvoted 1 times
...
jcgm1990
2 years, 11 months ago
Yes, Yes, No, can moderatos please fix this question
upvoted 1 times
...
raduM
2 years, 11 months ago
yes yes no
upvoted 1 times
...
Whatsamattr81
2 years, 11 months ago
You only disable inheritance for FolderA... When you put new perms on Folder A, they will be inherited by Folder B and C... Group 1 will have modify on A, B and C... Group 2 will have write on B and C etc etc
upvoted 1 times
...
gardengurl71
3 years ago
also tested in a lab, to confirm the YES, YES, NO answer
upvoted 1 times
gardengurl71
3 years ago
Further, if inheritance is disabled at a specific level, the object (FolderA), either a file or folder will not inherit permissions from its parent folders. If that object (FolderA) is a folder its own “children”, subfolders (FolderB/FolderC) and files, will still inherit permissions of that folder as long as those child objects themselves have inheritance enabled (inheritance not disabled on FolderB/C).
upvoted 1 times
...
...
ceskil
3 years, 2 months ago
I get User1 can read and write files in FolderC, as it inherit write from FolderB. I get User3 cannot delete files in FolderC, as FolderA Inheritance is disabled. But why User2 can delete all files in FolderB??? FolderA inheritance is disabled, and it only have write access, not modify.
upvoted 2 times
...
Maxymamac
3 years, 2 months ago
why statement 1 is yes? the permission inheritance is disabled and permission in folder c is ready only for group 3?
upvoted 1 times
...
Gresch123123
3 years, 3 months ago
No, No, No Am I missing something, "permission inheritance is disabled"
upvoted 3 times
FrancisLai
3 years, 2 months ago
I agree with you, the statement stated select the option to remove all inherited permissions. Which means all the permissions will be removed thus no one will have access to it and meaning that Folder B&C do not get any permissions. Therefore, answer should be N,N,N?
upvoted 1 times
...
Esmee93
3 years, 3 months ago
I had the same answer as you in the beginning. Think like there is another folder above FolderA, for example FolderX. FolderA doesn't receive permissions from FolderX, but FolderB DOES receive permissions from FolderA. The same goes for FolderC. It receives permissions from FolderA and FolderB. All the permissions that FolderA would have gotten from folders above it through inheritance are disabled, but this doesn't mean FolderB and FolderC are also disabled. Hope this helps!
upvoted 4 times
...
...
adeshtall
3 years, 3 months ago
If inheritance was turned off from folder A, then folder b and c still have read and modification guys this must be all yes, yes yes.
upvoted 1 times
Esmee93
3 years, 3 months ago
User3 never receives "Modify" and therefore can't delete files in FolderC.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...