1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

70-215 QOTD 30/06/2004

Discussion in 'Windows Server 2003 / 2008 / 2012 Exams' started by AJ, Jun 30, 2004.

  1. AJ

    AJ Administrator Administrator

    6,771
    102
    221
    You have a new Personnel Officer, Gavin, who is reporting for work tomorrow. Now, your IT Manager, Simon, needs you to make sure that Gavin can gain access to a folder on the file server, which is designated to him.

    Gavin is a member of the Personnel group and the Senior Management group. The permissions for the folder are configured as below:

    Share Permissions:

    Gavin - Full Control (Allow)
    Personnel - Read (Allow)
    Senior Management - Change (Allow)

    NTFS Permissions (for the folder and all contents of the folder):

    Gavin - Read (Allow)
    Personnel - Full Control (Allow)
    Senior Manegment - Full Control (Deny)

    What will Gavin's effective permissions be to the folder and why?

    A) Full Control.

    B) Change.

    C) Read.

    D) Deny Access.
     
    Certifications: MCSE, MCSA (messaging), ITIL Foundation v3
    WIP: Looking at doing ..................
  2. AJ

    AJ Administrator Administrator

    6,771
    102
    221
    Well you lot have had 3 days to answer this one and no takers. Sorry peeps it's now staying until Monday when I expect plenty of answers to this one :twisted:
     
    Certifications: MCSE, MCSA (messaging), ITIL Foundation v3
    WIP: Looking at doing ..................
  3. nugget
    Honorary Member

    nugget Junior toady

    7,796
    71
    224
    Sorry AJ, been a bit busy but I'll take a pop at C:Read.

    As far as I remember share permissions give the least restrictive and ntfs gives the most restrictive privledges.[​IMG]
     
    Certifications: A+ | Network+ | Security+ | MCP (270,271,272,290,620) | MCDST | MCTS:Vista
    WIP: MCSA, 70-622,680,685
  4. tripwire45
    Honorary Member

    tripwire45 Zettabyte Poster

    13,493
    179
    287
    C. I believe NTFS permissions trump share permissions.
     
    Certifications: A+ and Network+
  5. Jakamoko
    Honorary Member

    Jakamoko On the move again ...

    9,915
    60
    229
    Sorry AJ - must have missed this one. My bad :oops:


    Anyway, my answer - D Deny Access. As a member of Senior Management, I have Full Control denied, and as permissions are cumulative, I say I aint reading nuffink :(

    Fairly sure Deny overules Allow, but now I'm starting to doubt ...

    D it is for me.
     
    Certifications: MCP, A+, Network+
    WIP: Clarity
  6. tripwire45
    Honorary Member

    tripwire45 Zettabyte Poster

    13,493
    179
    287
    I saw that too and a deny always wins...but it's deny FULL CONTROL...would that preclude any lesser permission such as a simple Read???
     
    Certifications: A+ and Network+
  7. Jakamoko
    Honorary Member

    Jakamoko On the move again ...

    9,915
    60
    229
    Well, if Full Control is basically all the privileges available together, and you Deny it, then I reckon the book is closed.

    Stand corrected as always.

    Mind you, knowing AJ, the answer will probably be "unattend.txt" :biggrin
     
    Certifications: MCP, A+, Network+
    WIP: Clarity
  8. tripwire45
    Honorary Member

    tripwire45 Zettabyte Poster

    13,493
    179
    287
    I thought it was going to be dcpromo, or is that next week? :blink
     
    Certifications: A+ and Network+
  9. flex22

    flex22 Gigabyte Poster

    1,679
    0
    69
    D ..................................................is the effective permission.

    If it had come down to a choice over Share or NTFS, I wouldn't know what to put.The reason being that i don't know whether Gav is accessing the file server locally or via a client.
     
  10. Bluerinse
    Honorary Member

    Bluerinse Exabyte Poster

    8,871
    167
    256
    Flex, the question states that Gavin needs to access a file that is on a file server. Though it does not state whether he is accessing it across the network or whether he is accessing it locally, I think we can assume that it is across the nework because it is not normal practice to allow any user to sit at a file server to do their work.

    The answer is D

    Deny rules okay, use it sparingly

    Pete
     
    Certifications: C&G Electronics - MCSA (W2K) MCSE (W2K)
  11. AJ

    AJ Administrator Administrator

    6,771
    102
    221
    Good one guys, I love these questions about permissions really gets the grey matter going.[​IMG]

    Correct answer is: D

    Explanation: When you share a folder on a partition formatted with NTFS, both the shared folder permissions and the NTFS permissions combine to secure file resources.

    NTFS permissions apply whether the resource is accessed locally or over a network.

    When you combine NTFS permissions and shared folder permissions, the resulting permission is the most restrictive permission of the combined shared folder permissions or the combined NTFS permissions.

    Couldn't have said it better Pete. Deny overrides all permissions
     
    Certifications: MCSE, MCSA (messaging), ITIL Foundation v3
    WIP: Looking at doing ..................

Share This Page

Loading...