220-1002 · Question #718
Which of the following security settings can be changed on a folder to stop permission propagation and assign new rights?
The correct answer is A. Inheritance. Disabling NTFS inheritance on a Windows folder stops permission propagation from parent folders and allows an administrator to assign independent, unique permissions to that specific folder.
Question
Which of the following security settings can be changed on a folder to stop permission propagation and assign new rights?
Options
- AInheritance
- BOwnership
- CSharing
- DEncryption
How the community answered
(28 responses)- A93% (26)
- C4% (1)
- D4% (1)
Why each option
Disabling NTFS inheritance on a Windows folder stops permission propagation from parent folders and allows an administrator to assign independent, unique permissions to that specific folder.
NTFS permission inheritance controls whether a folder automatically receives permissions from its parent in the directory hierarchy. Disabling inheritance breaks the propagation chain and converts inherited ACL entries to explicit permissions, after which new rights can be assigned independently without being overridden by or affecting the parent folder's access control list.
Ownership determines who controls a file or folder's permission settings but has no effect on stopping permission propagation from parent folders through inheritance.
Sharing settings govern network access to a folder via SMB and are a separate permission layer from NTFS inheritance, which controls local and domain-level ACL propagation through the directory tree.
Encryption via EFS protects file contents from unauthorized access but is entirely unrelated to how NTFS permissions are inherited or propagated through the folder hierarchy.
Concept tested: NTFS permission inheritance and propagation control
Source: https://learn.microsoft.com/en-us/windows-server/storage/file-server/ntfs-permissions-and-share-permissions-differ
Topics
Community Discussion
No community discussion yet for this question.