Which of the following prefixes could be present in the output of getcifsacl? (Choose THREE correct answers.)

Question

Options

• AACL
• BGRANT
• CGROUP
• DOWNER
• ESID

• A
  88% (29)
• B
  6% (2)
• D
  6% (2)

Explanation

getcifsacl is a Linux utility (from cifs-utils) that retrieves CIFS/SMB Access Control Lists from mounted shares. Its output uses the prefixes ACL: (to list individual access control entries), GROUP: (to identify the group owner via a Windows Security Identifier), and SID: (Security Identifier - the Windows-style unique identity string embedded in ACL entries). These three map directly to fields the tool parses from the NT security descriptor stored on the share.

Why the distractors are wrong: GRANT (B) is terminology from Windows' icacls command, not a getcifsacl output prefix. OWNER (D) may seem logical since NT security descriptors do carry an owner field, but getcifsacl does not emit an OWNER: prefixed line - owner identity is conveyed through the SID values within other fields.

Memory tip: Think "AGS" - ACL, GROUP, SID - the three things a CIFS ACL tool needs to show you: what the rules are (ACL), who the group is, and the Windows identity format tying it all together (SID). If you remember that getcifsacl is a CIFS/Windows-bridge tool, you can eliminate GRANT (a Windows CLI term) and OWNER (not a labeled prefix in its output).

No community discussion yet for this question.