220-802 · Question #513
A user belongs to groups that have read permission on a folder and NTFS create permission. Which of the following BEST describes the access the user will have to files in the folder?
The correct answer is D. Read existing files but not edit or create new files. NTFS permissions are cumulative across group memberships, but the specific combination of Read and NTFS Create (Folders/Append Data) does not grant Write or Modify, limiting the user to reading existing files only.
Question
A user belongs to groups that have read permission on a folder and NTFS create permission. Which of the following BEST describes the access the user will have to files in the folder?
Options
- ARead and edit existing files but not create new files
- BRead and edit existing files and create new files
- CCreate and read new files but not read or edit existing files
- DRead existing files but not edit or create new files
How the community answered
(25 responses)- A4% (1)
- B12% (3)
- C4% (1)
- D80% (20)
Why each option
NTFS permissions are cumulative across group memberships, but the specific combination of Read and NTFS Create (Folders/Append Data) does not grant Write or Modify, limiting the user to reading existing files only.
Editing existing files requires the 'Write' or 'Modify' NTFS permission, which neither of the user's groups provides.
Creating new files requires the 'Create Files / Write Data' advanced permission, and editing requires 'Write' or 'Modify' - neither of which the user's groups grant.
The user holds 'Read' permission which propagates to existing files in the folder via inheritance, so existing files are readable.
The 'Read' basic NTFS permission allows viewing existing file contents and attributes. The 'Create' NTFS advanced permission in this context maps to 'Create Folders / Append Data,' which permits creating subfolders and appending to existing files - not creating new files. Without 'Write' or 'Modify,' the user cannot edit existing files or create new files, making read-only the effective access.
Concept tested: NTFS effective permissions with multiple group memberships
Source: https://learn.microsoft.com/en-us/windows/win32/secauthz/access-control-lists
Topics
Community Discussion
No community discussion yet for this question.