ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MD-100 All Questions

View all questions & answers for the MD-100 exam
Go to Exam

Exam MD-100 topic 3 question 14 discussion

Actual exam question from Microsoft's MD-100
Question #: 14
Topic #: 3
[All MD-100 Questions]

HOTSPOT -
You have a computer named Computer5 that runs Windows 10 that is used to share documents in a workgroup.
You create three users named User-a, User-b, and User-c by using Computer Management. The users plan to access Computer5 from the network only.
You have a folder named Data. The Advanced Security Settings for the Data folder are shown in the Security exhibit. (Click the Security tab).

You share the Data folder. The permissions for User-a are shown in the User-a exhibit (Click the User-a tab.)

The permissions for User-b are shown in the User-b exhibit. (Click the User-b tab.)

The permissions for User-c are shown in the User-c exhibit. (Click the User-c tab.)

For each of the following statements, select Yes if the statements is true. Otherwise, select No.
NOTE: Reach correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1: No -
User-a only has Read share permission so he cannot modify files in the Data share.

Box 2: No -
User-b only has Read share permission so he cannot delete files in the Data share.

Box 3: Yes -
User-c has Read and Change share permission so he can read files in the Data share. User-c does not have an entry in the Advanced Security Settings for the
Data folder. However, User-c would be a member of the Users group by default and that group has Full Control permission to the folder.
by Duyons at Nov. 10, 2020, 7:36 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Hisandy
Highly Voted 4 years, 2 months ago
The answer is correct. They threw NTFS permissions to confuse us. In this case, you only need to count shared permissions.
upvoted 7 times
rendog
2 years, 6 months ago
Not true. You'd need to factor in the NFTS permissions AND share permissions (and apply the most restrictive of the two) when accessing a shared folder/file over the network.
upvoted 1 times
...
...
Duyons
Highly Voted 4 years, 5 months ago
Correct - the most restricted takes place here which is "Read"
upvoted 6 times
Duyons
4 years, 4 months ago
https://www.youtube.com/watch?v=GfmkD12ywfw https://www.dnsstuff.com/ntfs-vs-share-permissions#:~:text=Share%20permissions%20are%20simpler%20to,can%20be%20applied%20across%20networks.
upvoted 5 times
...
...
flabezerra
Most Recent 2 years, 7 months ago
Examtopics is the best student! User-a: NTFS: allow:Read & execute + Share: allow:Read = Read User-b: NTFS: allow:Modify + Share: allow:Read = Read User-c: NTFS: (Users group: allow:Read & execute) + Share: allow:Change = Read & execute
upvoted 2 times
...
jcgm1990
2 years, 10 months ago
Answer is No, No, yes, the throw NTFS permissions to confuse us but the question clearly states these users will access this folder from the network so NTFS permissions don't come into play, only the share network permissions
upvoted 1 times
...
Mohammad283
3 years, 4 months ago
hm, am I blind... I dont see Users with full control, only read & execute?
upvoted 5 times
...
Log880228
3 years, 6 months ago
Unless I'm mistaken, the users group is not in full control but in read & execute so the answer should be no, no, no
upvoted 2 times
Log880228
3 years, 6 months ago
sorry, I misread this comment can be deleted.
upvoted 2 times
...
...
mikl
3 years, 6 months ago
Pay attention to the fact that this is only share permissions. NO, NO, YES.
upvoted 4 times
...
CARIOCA
3 years, 10 months ago
Essa questão ficou muito dividida no gabarito, afinal qual seria a resposta e qual a justificativa? Após um debate de 12 comentários, o gabarito é o mesmo ou não?
upvoted 1 times
...
SenorSpielbergo
4 years, 2 months ago
Given answers are correct. N, N, Y
upvoted 4 times
...
Modernwasnas
4 years, 4 months ago
But the group Users has full control? Isnt it supossed the be all 3 YES?
upvoted 1 times
amymay101
4 years, 4 months ago
explicit NTFS permissions assigned to a user take precedence over a group the user is a member of. Thats why user a and b do not have full control
upvoted 1 times
Chevorelli
3 years, 7 months ago
Is it also that the fact there is conflicting permissions? When NTFS + Share Permissions are both conflicting, the most restrictive permission is the permission you are bound to?
upvoted 1 times
...
...
...
Chris_m
4 years, 4 months ago
This is correct, if anyone is confused as to how User C can read, it's because they are a member of the Users group in the NTFS permissions (which has Full Control). The share permission then restricts them further, as they are accessing it over the network (as stated in the question this folder is only accessed via the network).
upvoted 5 times
...
Divy95
4 years, 4 months ago
I'm unable to find User c in the first exhibit. If User c is not assigned an NTFS permission, they can't view the contents of a shared folder. You need both NTFS and Share permissions to open the folder successfully.
upvoted 1 times
Duyons
4 years, 4 months ago
Divy95. Sorry, but what are you saying does not make any sense. Share permissions are for managing the access to folder shared over a network only. If you are logged in locally, share permissions do not apply. Share permissions are more general than NTFS, depending of what file structure or what you are using as a file system like FAT 32 which does not support security, in this case, you can configure permissions at the share level is a good choice. There is no such YOU NEEED both NTFS and Share permissions to open the folder successfully.
upvoted 1 times
...
Shadowankh
4 years, 1 month ago
Divy95, as user-c is a local account it is member of the local group users, which has read&execute.
upvoted 4 times
...
...
YumBum
4 years, 5 months ago
user b was given modify access.. am I wrong? am I missing something? Modify: Users can view and modify files and file properties, including deleting and adding files to a directory or file properties to a file.
upvoted 1 times
[Removed]
4 years, 5 months ago
The reason that user B cannot modify is because the user's share permissions only give read access. Even though user B has modify as an NTFS permission, the lowest privilege is applied. https://www.varonis.com/blog/ntfs-permissions-vs-share/
upvoted 10 times
HvD
3 years, 3 months ago
freds248, agreed. But to be more specific, this only is true in this situation, where the share is accessed from the network (it is). If the user was logged on locally, then only the NTFS-permissions would be relevant.
upvoted 2 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago