nerdexam
CompTIA

220-802 · Question #862

Which of the following is the access level of a user that belongs to both the Administrators and Users groups?

The correct answer is B. Administrator. In Windows, when a user belongs to multiple groups, they receive the cumulative permissions of all groups, with the highest privilege group - Administrators - taking precedence.

Networking

Question

Which of the following is the access level of a user that belongs to both the Administrators and Users groups?

Options

  • AUser
  • BAdministrator
  • CPower User
  • DRemote Desktop User

How the community answered

(38 responses)
  • A
    5% (2)
  • B
    92% (35)
  • C
    3% (1)

Why each option

In Windows, when a user belongs to multiple groups, they receive the cumulative permissions of all groups, with the highest privilege group - Administrators - taking precedence.

AUser

A user with Administrator group membership is not limited to User-level access; the higher privilege of the Administrators group takes effect.

BAdministratorCorrect

Windows uses an additive permissions model where a user's effective rights are the union of all groups they belong to. Since the Administrators group grants the highest level of system access, membership in both Administrators and Users means the user operates with full Administrator-level privileges. The Users group membership adds no restrictions that would override or reduce the Administrator group rights.

CPower User

Power User is a separate, distinct Windows group that is not derived from combining Administrators and Users membership; the user in question would be an Administrator, not a Power User.

DRemote Desktop User

Remote Desktop User is a separate group that grants only the right to log on via Remote Desktop; it is unrelated to the combined permissions of Administrators and Users.

Concept tested: Windows group membership and cumulative permissions model

Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/local-accounts

Topics

#user groups#Windows permissions#group membership#access control

Community Discussion

No community discussion yet for this question.

Full 220-802 Practice