nerdexam
CompTIA

220-802 · Question #945

A technician is tasked with implementing the principle of least privilege to secure a file server so that only authorized users can modify company documents. Which of the following should the…

The correct answer is A. Create a folder hierarchy, disable inheritance and assign user's permissions to specific folders. Least privilege means users receive only the minimum permissions needed for their role. Creating a folder hierarchy and disabling inheritance breaks the default permission flow, allowing the technician to assign explicit, granular permissions to each folder for specific users…

Networking

Question

A technician is tasked with implementing the principle of least privilege to secure a file server so that only authorized users can modify company documents. Which of the following should the technician implement to comply with the request?

Options

  • ACreate a folder hierarchy, disable inheritance and assign user's permissions to specific folders.
  • BCreate a shared folder and grant full administrative rights only to the users who need to modify
  • CCreate a folder tree hierarchy, enable inheritance and assign user's permissions to specific
  • DCreate a shared folder and only provide read access to all users regardless of their role.

How the community answered

(59 responses)
  • A
    71% (42)
  • B
    5% (3)
  • C
    8% (5)
  • D
    15% (9)

Explanation

Least privilege means users receive only the minimum permissions needed for their role. Creating a folder hierarchy and disabling inheritance breaks the default permission flow, allowing the technician to assign explicit, granular permissions to each folder for specific users - no one gets access they haven't been deliberately granted. Option B grants full admin rights, violating least privilege. Option C enables inheritance, which can propagate broader permissions unintentionally. Option D gives everyone read access regardless of role, which also ignores role-based differences.

Topics

#least privilege#file permissions#folder inheritance#user access control

Community Discussion

No community discussion yet for this question.

Full 220-802 Practice