220-802 · Question #598
220-802 Question #598: Real Exam Question with Answer & Explanation
The correct answer is D: DENY permissions always supersede ALLOW permissions in Windows. In Windows, DENY permissions always take precedence over ALLOW permissions, regardless of how they are assigned. Because the 'Everyone' group was given DENY rights, this overrides the explicit ALLOW rights granted to individual users - since all users are members of 'Everyone.' T
Question
Options
- AThe user needs to give the group "ADMINISTRATORS" full read/write access
- BThe GUEST account needs to be added to the list of users who have shared access
- CThe user has DENY permissions setup for the POWER USERS group which needs to be removed
- DDENY permissions always supersede ALLOW permissions in Windows
Explanation
In Windows, DENY permissions always take precedence over ALLOW permissions, regardless of how they are assigned. Because the 'Everyone' group was given DENY rights, this overrides the explicit ALLOW rights granted to individual users - since all users are members of 'Everyone.' The individual ALLOW grants are effectively cancelled out by the inherited DENY. The fix is to remove the DENY entry from the 'Everyone' group rather than adding more ALLOW entries. Options A, B, and C describe unrelated or unnecessary changes that would not resolve a permissions conflict caused by this fundamental Windows rule.
Community Discussion
No community discussion yet for this question.