220-1002 Question #70: Real Exam Question with Answer & Explanation

The correct answer is A: Deny. In Windows NTFS and share permissions, Deny always overrides Allow, regardless of any other group memberships or assigned permissions. If a user belongs to a group that is explicitly denied access to a resource, that Deny entry takes precedence even if another group they belong t

Question

By default which of the following permissions will take precedence over any other assigned permission on a mapped network drive?

Options

ADeny
BModify
CShare
DAllow

Explanation

In Windows NTFS and share permissions, Deny always overrides Allow, regardless of any other group memberships or assigned permissions. If a user belongs to a group that is explicitly denied access to a resource, that Deny entry takes precedence even if another group they belong to has Allow or Modify permissions. This makes Deny the highest-precedence permission by design, ensuring that explicit exclusions cannot be bypassed through group membership. Modify (B) and Allow (D) are permission levels that can be overridden by Deny. Share (C) is a permission category, not a precedence level.

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice