220-802 · Question #792
A technician needs to create a private shared folder for each employee at a small business to store their files. The technician wants the main folder to be called "Employee Documents" and the…
The correct answer is D. Set share permissions for "Employee Documents" to Everyone = Full Control, and set NTFS. This is a classic Windows permissions best practice scenario. Windows enforces the most restrictive combination of share permissions and NTFS permissions. The recommended approach is to set share permissions broadly (Everyone = Full Control) and then use NTFS permissions to…
Question
A technician needs to create a private shared folder for each employee at a small business to store their files. The technician wants the main folder to be called "Employee Documents" and the subfolders to be named after each employee (e.g. "John Smith"). The technician wants to map the "Employee Documents" folder on all computers as the M:\ drive for all users. Each employee should only have access to their own folder without the ability to change permissions. Which of the following permissions should the technician set?
Options
- ASet share permissions for "Employee Documents" to Everyone = Read, and set NTFS permissions
- BSet share permissions for "Employee Documents" to Everyone = Full Control, and set NTFS
- CSet share permissions for "Employee Documents" to Everyone = Change, and set NTFS permissions
- DSet share permissions for "Employee Documents" to Everyone = Full Control, and set NTFS
How the community answered
(26 responses)- A31% (8)
- B4% (1)
- C12% (3)
- D54% (14)
Explanation
This is a classic Windows permissions best practice scenario. Windows enforces the most restrictive combination of share permissions and NTFS permissions. The recommended approach is to set share permissions broadly (Everyone = Full Control) and then use NTFS permissions to enforce the actual granular access control - in this case, granting each employee access only to their own named subfolder. This way, NTFS permissions do all the meaningful security work. Setting share permissions to Read (option A) would prevent users from writing or saving files to their own folders, defeating the purpose. Setting share permissions to Change (option C) is an intermediate option but still goes against the best practice of letting NTFS handle granular control. Granting Full Control at the share level and restricting with NTFS permissions gives the tightest, most manageable security model, since NTFS permissions can be applied at the individual subfolder level to each employee.
Topics
Community Discussion
No community discussion yet for this question.