A folder on an NTFS volume has the following permissions enabled for the administrators group: full control, modify, and write. A technician adds a permissions entry to the folder's security…

The correct answer is B. Read E. Execute. In NTFS, Deny always takes precedence over Allow at the same permission scope level. The original Allow entries (Full Control, Modify, Write) grant all standard permissions. When Deny Write and Deny Modify are added, those permissions are stripped away - including all the…

Networking

Question

A folder on an NTFS volume has the following permissions enabled for the administrators group:

full control, modify, and write. A technician adds a permissions entry to the folder's security settings denying the administrators group write and modify access. Which of the following permissions will the administrators group effectively have? (Select TWO)

Options

AWrite
BRead
CFull control
DModify
EExecute
FSpecial permissions

How the community answered

(43 responses)

A
2% (1)
B
56% (24)
C
9% (4)
D
7% (3)
F
26% (11)

Explanation

In NTFS, Deny always takes precedence over Allow at the same permission scope level. The original Allow entries (Full Control, Modify, Write) grant all standard permissions. When Deny Write and Deny Modify are added, those permissions are stripped away - including all the sub-permissions they cover. The standard NTFS 'Modify' permission encompasses Write, Delete, Read, and Execute (but not Change Permissions or Take Ownership). After denying both Write and Modify, the only standard permissions that remain unblocked from the original Full Control grant are Read and Execute, since those were not explicitly denied. Full Control, Modify, and Write are all effectively blocked by the deny entries.

Topics

#NTFS permissions#deny permissions#access control#effective permissions

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice