220-1002 · Question #329
Which of the following NTFS security settings overrides all other settings?
The correct answer is A. Deny. In NTFS permissions, an explicit 'Deny' permission always takes precedence over any 'Allow' permission, regardless of how the Allow permission was granted - whether directly, through group membership, or via inheritance. For example, if a user is a member of a group that has…
Question
Which of the following NTFS security settings overrides all other settings?
Options
- ADeny
- BModify
- CRead
- DWrite
How the community answered
(57 responses)- A89% (51)
- B4% (2)
- C5% (3)
- D2% (1)
Explanation
In NTFS permissions, an explicit 'Deny' permission always takes precedence over any 'Allow' permission, regardless of how the Allow permission was granted - whether directly, through group membership, or via inheritance. For example, if a user is a member of a group that has 'Allow Read' on a folder, but a 'Deny Read' is applied to the user directly or to another group they belong to, access will be denied. This is a fundamental security principle in Windows NTFS: Deny wins. Modify (B), Read (C), and Write (D) are all types of Allow-level permissions that can be overridden by a Deny setting. Administrators must apply Deny permissions carefully because they can inadvertently block even administrator-level access.
Topics
Community Discussion
No community discussion yet for this question.