ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MD-100 All Questions

View all questions & answers for the MD-100 exam
Go to Exam

Exam MD-100 topic 3 question 24 discussion

Actual exam question from Microsoft's MD-100
Question #: 24
Topic #: 3
[All MD-100 Questions]

HOTSPOT -
You have a computer named Computer1 that runs Windows 10. Computer1 is in a workgroup.
Computer1 contains the local users shown in the following table.

You create a folder named Folder1 that has the permissions shown in the following table.

You create a file named File1.txt in Folder1 and allow Group2 Full control permissions to File1.txt.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Reference:
https://www.dell.com/support/article/za/en/zadhs1/sln156352/understanding-file-and-folder-permissions-in-windows?lang=en
by PanKok at Oct. 5, 2020, 3:40 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Anthony_2770
Highly Voted 4 years, 7 months ago
NO, NO , Yes I am sick of the incorrect answers in this exam
upvoted 64 times
Kock
2 years, 9 months ago
NO, NO, SI NÃO, NÃO, SIM
upvoted 1 times
...
AnoniMouse
3 years, 12 months ago
I was also at your side and wanted to say NO, NO, YES, but I did this in a VM and surprisingly the answer is NO, YES, YES. Try it for yourself to see
upvoted 18 times
AnoniMouse
3 years, 12 months ago
This is because User1 has explicit DENY write on the folder BUT he has an explicit FULL CONTROL on the file! Dang!
upvoted 8 times
...
lauroramos
3 years, 11 months ago
Tested too... NO, YES, YES
upvoted 11 times
...
flabezerra
2 years, 8 months ago
No, Yes, Yes I tested in a VM from Skillable. The results are what AnoniMouse said. Brilliant! About the second statement: The full control given to Group2 explicitly by passes the inherited Deny Write from Folder1. That's really cool stuff!
upvoted 5 times
...
...
Anthony_2770
4 years, 6 months ago
I stand corrected. No, Yes,Yes The question is testing for explicit vs implicit permissions understanding It’s important to note that if the explicit permissions allow access, then the inherited permissions will never be checked. Hierarchy of Permissions : Explicit Deny Explicit Allow Inherited Deny Inherited Allow 1.No - Inherited Deny will override inherited allow (even if it is full control) 2. Yes - Explicit Allow will override implicit deny 3. Yes - Inherited Allow
upvoted 77 times
configmike
4 years, 1 month ago
"You create a file named File1.txt in Folder1 and allow Group2 Full control permissions to File1.txt." This is the key for #2. User is in Group 2. This is explicit as you mentioned.
upvoted 2 times
...
jcgm1990
2 years, 11 months ago
First you say N,N,Y then you say N,Y,Y, I have just tested this in my lab and I am able to Y,Y,Y
upvoted 2 times
DaZa5
2 years ago
I've just tested it. It is NYY. For me it is right the last Anthony_2770 reply.
upvoted 1 times
...
...
subbuhotmail
3 years, 10 months ago
Yes True. Answer is N/Y/Y. Reference : https://www.ntfs.com/ntfs-permissions-precedence.htm
upvoted 4 times
...
...
...
PanKok
Highly Voted 4 years, 7 months ago
1. No 2. No 3. Yes
upvoted 15 times
...
_Co_
Most Recent 2 years, 1 month ago
no, yes, yes The deny write permissions prevent user1 from creating a file. Due to the explicit Full control permissions on file1, user1 can edit and save file1. User2 has the possibility to view the contents of file1 due to the full control permissions
upvoted 1 times
...
ChrisC21
2 years, 2 months ago
No, Yes, Yes. Tested in VM. Good explanation by Anthony
upvoted 1 times
...
Andr3as88
2 years, 4 months ago
for me NO, NO, YES User 1 and user 2 are member of group 1 where applies the deny write permission. So they neither can create nor save anythig. User 2 is member of group1 where applies the deny write permission, but this doesnt exclude him in order to list the content. correct me if i am wrong
upvoted 1 times
flabezerra
2 years, 4 months ago
You really need to review the second statement. You did not understand how strong the explicit permissions mean.
upvoted 1 times
Andr3as88
2 years, 4 months ago
you are right Sir!, its NO, YES, YES. group 2 has has explicit full control permission for file1.txt
upvoted 1 times
...
...
...
Celx2
2 years, 5 months ago
NO, YES, YES in my opinion. Can't see how explicit deny will override anything else. I know the fun is in researching but I'm so tired of all the questions that can't have answers that no one can agree upon.
upvoted 2 times
...
Thomas4k
2 years, 7 months ago
No, No, Yes - im happy you agree in here cause there are too many errors
upvoted 1 times
...
Szaier
2 years, 7 months ago
NO,YES,YES
upvoted 2 times
...
VEEM
2 years, 7 months ago
I wish someone can make me understands where do they get these answers...User1 is part of grp1&2, grp2 has deny write, grp1 has full control, so deny will win in this case...thats 1st N. same principle on question 2, user1 cant save changes bcz is having a deny. User2 is part of grp1, which has allow full, there for its Y... the answer is NNY according to me
upvoted 1 times
...
Kock
2 years, 9 months ago
NÃO, NÃO, SIM
upvoted 1 times
Kock
2 years, 9 months ago
Correção: Não, sim, sim. Testado:20/08/22
upvoted 1 times
...
...
Kock
2 years, 9 months ago
Não, sim, sim Testado...
upvoted 1 times
...
jcgm1990
2 years, 11 months ago
Correct answers are no, yes, yes, 100%
upvoted 3 times
...
PChi
3 years, 2 months ago
Explicit permissions take precedence over inherited permissions, even inherited Deny permissions. Although folder 1 has been given deny write NTFS permission, folder 1.txt has been given explicit allow full control. My answer would be Y,Y,Y. If you're confused don't simply rely on the answers on here. When you see conflicting answers, take the time to study up so that you can answer based upon your accumulated knowledge. Not SIMPLY based upon majority rules because sometimes the majority is wrong.
upvoted 3 times
xian05
3 years, 2 months ago
Care to explain with this logic why the first one would be Yes? Because we only have the explicit deny on this folder.
upvoted 1 times
...
PChi
3 years, 2 months ago
I can see where the confusion is coming from though. Simply having a chart with the word INHERETED FROM is off putting. If folder 1 has inherence disabled that would mean everyone with permissions assigned to that folder now has explicit permissions as well which changes the first answer to no... is that what the chart is stating when it says INHERETED FROM?
upvoted 1 times
99redeyeflight
3 years, 2 months ago
User 1 is part of Group 2 which is explicitly denied write on Folder1. Nothing trumps this explicit denial, so they cannot write to the folder Not sure what is confusing about that one
upvoted 1 times
...
...
...
Fginebrosa
3 years, 3 months ago
NO - YES - YES. Tested in lab
upvoted 5 times
...
BlazakBla36123
3 years, 4 months ago
Why would anyone set permissions like this?
upvoted 2 times
BlazakBla36123
3 years, 4 months ago
And what is the correct answer and why?
upvoted 1 times
...
...
CGtheConqueror
3 years, 5 months ago
yes, yes, yes User 1 belongs to both group 1 and group 2. thus, user 1 gets the best access based upon permission. However, if user 1 was identified in the NTFS permission as deny write then the user wouldn't be able to create a file.
upvoted 1 times
...
balchandra
3 years, 5 months ago
NO,YES,YES
upvoted 4 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel