A user has Share permissions of "Allow ?Full Control" and NTFS permissions of "Allow ?Read, Allow ?Write, Deny ?Modify" to a shared file. In which of the following ways can they manipulate the file?

Question

Options

• AThey can delete the file.
• BThey can open the file.
• CThey can take ownership of the file.
• DThey can edit permissions on the file.

• A
  7% (3)
• B
  68% (28)
• C
  5% (2)
• D
  20% (8)

Explanation

When both Share and NTFS permissions apply, Windows enforces the most restrictive combination. The effective NTFS permissions here are: Allow Read, Allow Write, but Deny Modify. In Windows, 'Modify' is a higher-level permission that includes the ability to delete files, change file attributes, and run executables. An explicit 'Deny' always overrides 'Allow,' so the user cannot delete (requires Modify) - ruling out A. Taking ownership and editing permissions both require Full Control, which is not granted via NTFS - ruling out C and D. However, 'Allow Read' is explicitly granted and not overridden by any Deny, so the user CAN open and read the file. Answer B is the only action permitted by the effective permissions.

No community discussion yet for this question.