Exam 70-742 topic 1 question 69 discussion

The correct question: $m1 = Get-ADUser -Filter {Name -eq 'User01'} $m2 = Get-ADUser -Filter {Name -eq 'User1'} Add-ADGroupMember -Identity Group1 -Members $m1 Add-ADGroupMember -Identity Group2 -Members $m2 Add-ADGroupMember -Identity GroupA -Members User01 Add-ADGroupMember -Identity GroupA -Members Group2 Add-ADGroupMember -Identity GroupB -Members User10 Add-ADGroupMember -Identity GroupB -Members Group1 For me: Yes, No, Yes.

User1--> NO User11-->No User01-->No User 1 gets in Group2 but Group02 gets member of GroupA so its a No

The Question as well as Answer for this one are incorrect. The answers are: User1  Yes User11  No User01  Yes

the images for this question are all off. i think vein has the best correction for this question.

If the script is: $m1 = Get-ADUser -Filter {Name -like'User1*'} $m2 = Get-ADUser -Filter {Name -eq 'User1'} Add-ADGroupMember -Identity Group1 -Members $m1 Add-ADGroupMember -Identity Group2 -Members $m2 Add-ADGroupMember -Identity GroupA -Members User01 Add-ADGroupMember -Identity GroupA -Members Group2 Add-ADGroupMember -Identity GroupB -Members User10 Add-ADGroupMember -Identity GroupB -Members Group1 then correct answer is Y-Y-N(as VeiN said) But if it is: $m1 = Get-ADUser -Filter {Name -eq 'User01'} $m2 = Get-ADUser -Filter {Name -eq 'User1'} Add-ADGroupMember -Identity Group1 -Members $m1 Add-ADGroupMember -Identity Group2 -Members $m2 Add-ADGroupMember -Identity GroupA -Members User01 Add-ADGroupMember -Identity GroupA -Members Group2 Add-ADGroupMember -Identity GroupB -Members User10 Add-ADGroupMember -Identity GroupB -Members Group1 then correct answer is Y-N-Y(as Kamikazekiller said) The difference between them is in first line.

Found a version of this question that makes most sense: https://issuu.com/testpassportexams/docs/70-742 $m1 = Get-ADUser -Filter {Name -like'User1*'} $m2 = Get-ADUser -Filter {Name -eq 'User1'} so in $m1 we have: user1,user11,user10 $m2 = user1 1. User1 has Full Controll permissions to Folder1: Yes GroupA gives Full Control to Folder1 and has nested Group2 which has user1 as member User11 has Full Controll permissions to Folder2: Yes GroupB gives Full Control to Folder2 and has nested Group1 which has user11 as member User01 has Full Controll permissions to Folder2: No User01 has access only to Folder1

Answer is correct. Yes, No, No

I just wasted an hour or two of my life verifying this in my lab in exquisite detail, and I can affirm the above answer is correct,, e.g.: User1--> YES User11-->NO User01--> NO That is presuming the typos in the table are real and corrected follows: # Corrections to questions: Group11 "user" in table should probably be renamed to User11 (no Group11 or User11 in script) Group02 in script should be renamed to Group2 or there will be error (no Group02 in table) # Corrected script $m2 = Get-ADUser -Filter { Name -eq 'User1' } Add-ADGroupMember -Identity Group1 -Members $m1 <- Note: error for $m1 not defined Add-ADGroupMember -Identity Group2 -Members $m2 Add-ADGroupMember -Identity GroupA -Members User01 Add-ADGroupMember -Identity GroupA -Members Group2 Add-ADGroupMember -Identity GroupB -Members User10 Add-ADGroupMember -Identity GroupB -Members Group1 Of course others will disagree, but run it through the lab and analize, and I can't see you coming to any other results. If you can, maybe somebody else cares (I don't).

NO, NO, NO Reason for the first one - User1 > $m2 > Group2. Group2 is not added to any other folder or group, so it can't have permissions to Folder1. However, Group02 does have permissions as it's added to GroupA, but Group02 doesn't exist in the first table. If this is a typo, and it was really meant to say Group2 not Group02, then yes it would be correct. Just keep an eye out for this one in the exam and read the question...

Answer will be User1: NO, User11: NO, User01: NO 1) User 1 is not added in script. So as its a general user and not included in script so it wont have any permission to operate Folder1/Folder2. 2) User11 is not added in script. So as its a general user and not included in script so it wont have any permission to operate Folder1/Folder2. 3) User01 is added in GROUP A and GROUP A has privilege of full access of Folder1 . But question asked about Folder2 for User01.... so its also NO .... Plz note: The question asked about "FULL CONTROL PERMISSION" not about generic permission that a user gets. So if all 3 conditions (scriipt, Group, Folder) is not satisfying the answer will be NO .... Correct me if i am wrong :)

YES, NO, YES User1 is addedd to Group2 (lines 2, 4). In line 6, Group2 is added to GroupA. GroupA has full access to Folder1. User11 is not added to a group by the script. User11's account is unaffected by the script. User01 is added to Group1 (line 1, 3). Group1 is added to GroupB (line 8). GroupB has full access to Folder2.

Correct answer: YES, No, YES

Yes, No, Yes, Explanation: User1 is addedd to Group2 (lines 2, 4). In line 6, Group2 is added to GroupA. GroupA has full access to Folder1. User11 is not added to a group by the script. User11's account is unaffected by the script. User01 is added to Group1 (line 1, 3). Group1 is added to GroupB (line 8). GroupB has full access to Folder2.

I think the example answer is correct. My logic is below on the assumption that Group11 is User11, Group2 is Group02. User1 > Group2 > GroupA > Folder1 > Yes < User1 has Folder1 User11 > nothing > No < USer11 has Folder2 User01 > GroupA > Folder1 > No < USer01 has Folder2

Group11 = User11?

GROUP02 = GROUP2? don't think so.