exam questions

Exam MD-100 All Questions

View all questions & answers for the MD-100 exam

Exam MD-100 topic 3 question 72 discussion

Actual exam question from Microsoft's MD-100
Question #: 72
Topic #: 3
[All MD-100 Questions]

HOTSPOT -
You have a computer named Computer1 that runs Windows 10. Computer1 contains a folder named Data on drive C. The Advanced Security Settings for the
Data folder are shown in the exhibit. (Click the Exhibit tab.)

You share C:\Data as shown in the following table.

User1 is a member of the Users group.
Administrators are assigned Full control NTFS permissions to C:\Data.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
User1 cannot write files when connected to \\Computer1\Data because the Users group only has Read & Execute NTFS permission to the C:\Data folder and there are no explicit NTFS permissions for User1.
User1 cannot write files locally because the Users group only has Read & Execute NTFS permission to the C:\Data folder and there are no explicit NTFS permissions for User1.
Administrators cannot change the NTFS permissions of files and folders when connected to \\Computer1\Data because they only have Change share permission.
The would need Full Control share permission. They could do it locally because they have Full Control NTFS permission.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Anthony_2770
Highly Voted 4 years, 7 months ago
Notes : There are three types of share permissions: Full Control, Change, and Read. Full Control: Enables users to “read,” “change,” as well as edit permissions and take ownership of files. Change: Change means that user can read/execute/write/delete folders/files within share. Read: Read allows users to view the folder’s contents.
upvoted 11 times
Thijstr
4 years, 5 months ago
So it should be: yes, yes, no?
upvoted 1 times
AVP_Riga
4 years, 3 months ago
No, Users don't have NTFS permissions.
upvoted 3 times
AVP_Riga
4 years, 3 months ago
NO, NO, NO
upvoted 7 times
Willtic
3 years, 5 months ago
With the initial logic I would have chosen the same, but in fact for having tested, the Share Permission Change allows the administrator to Change NTFS permissions, definitely NO, NO, YES
upvoted 3 times
neobahamutk
3 years, 4 months ago
You cannot use NTFS permisions using a share, only localy.
upvoted 2 times
...
...
...
...
...
...
Duyons
Highly Voted 4 years, 7 months ago
https://www.varonis.com/blog/ntfs-permissions-vs-share/#:~:text=NTFS%20permissions%20are%20used%20to,click%20on%20the%20file%2Ffolder
upvoted 6 times
...
JePe
Most Recent 2 years, 1 month ago
The answer is clearly No No No The most restrictive option is Read and execute not write. For the administrator account, this is a local account and cannot set NTFS permissions.
upvoted 1 times
...
Henry78
2 years, 10 months ago
the first one is YES a user specific (directly applied) perm beats a group perm Therefore; Change beats R&E https://www.ntfs.com/ntfs-permissions-precedence.htm
upvoted 1 times
...
tf444
3 years, 11 months ago
No, No ,Yes NTFS (full control)+ Share(change) =most restrective (change). The administrator has full control on NTFS, and change permission on share.
upvoted 3 times
99redeyeflight
3 years, 3 months ago
they need full control permission on share are well, not change
upvoted 2 times
...
...
Perycles
4 years, 2 months ago
No,no,no .... too easy :)
upvoted 4 times
...
AVP_Riga
4 years, 3 months ago
I think NO, NO, YES. Users don't have NTFS permissions to modify files. Share rules only first step of checks if we running over net.
upvoted 3 times
AVP_Riga
4 years, 3 months ago
NO - User1 don't have write NTFS permission. NO - User1 don't have write NTFS permission. NO - Administrators can set NTFS permissions locally, but not through using share.
upvoted 11 times
...
...
Mr01z0
4 years, 4 months ago
The provided solution is correct, remember with share and NTFS rights the most restrictive setting is the one that counts.
upvoted 3 times
...
Myfeltf65
4 years, 5 months ago
Answer is No, No, Yes
upvoted 2 times
...
Bong20
4 years, 5 months ago
I thin the answer is Yes, No, No. It is always the "Most Restrictive Wins" when it comes to permissions.
upvoted 2 times
Bong20
4 years, 5 months ago
Sorry, I meant it should be No, No and No!
upvoted 7 times
...
...
ANDREVOX
4 years, 5 months ago
Answer is YES, NO & NO. NTFS and Share permissions are cumulative, thus User 1 has has read and change permission on share 1, giving the user the ability to read and write file to the \\computer\data share but the user can only read and execute file when connected locally. The Administrator can only change the NTFS permissions when connected to the local folder. The change share folder prohibits the Administrator from changing NTFS permissions when over the network share.
upvoted 4 times
Tekwiz86
4 years, 5 months ago
The answer is NO, NO, & NO. As shown in Doyons's link and I tried it too. NTFS and Share permissions are combined but the most restrictive permission is the winner. In this example NTFS has the most restrictive permission for User1 so it will always be the effective one.
upvoted 11 times
AVP_Riga
4 years, 3 months ago
I set same rules, and in Effective Access tab I see "Access limited by Share" behind Full Control for Administrators group.
upvoted 1 times
...
...
...
sachi_j
4 years, 5 months ago
I think it should be YES, YES, NO.
upvoted 1 times
mikl
3 years, 9 months ago
Care to explain why?
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...