nerdexam
Microsoft

70-698 · Question #149

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…

The correct answer is B. No. Setting the Everyone share permission to Full Control alone does not resolve the issue because effective network permissions are the most restrictive combination of share and NTFS permissions.

Configure data access and usage

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this scenario, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. A company has a client device that runs Windows 10 Pro. The device has a folder named Folder1. The folder is configured using the following settings:

A user reports that they cannot change documents when accessing them over the network. You need to ensure that the users can change documents in the folder. Solution: You set the Everyone group share permission to Full Control. Does the solution meet the goal?

Options

  • AYes
  • BNo

How the community answered

(52 responses)
  • A
    29% (15)
  • B
    71% (37)

Why each option

Setting the Everyone share permission to Full Control alone does not resolve the issue because effective network permissions are the most restrictive combination of share and NTFS permissions.

AYes

This is incorrect because a Full Control share permission cannot override a restrictive NTFS permission - NTFS remains the limiting factor for effective network access.

BNoCorrect

When a user accesses a folder over the network, Windows calculates effective permissions as the most restrictive intersection of share permissions and NTFS permissions. Even if Everyone is granted Full Control at the share level, a restrictive NTFS permission (such as Read or Read and Execute) still caps the user's effective access to read-only. Both the share permission and the NTFS permission must allow write access for the user to modify documents over the network.

Concept tested: Effective network permissions - share vs NTFS intersection

Source: https://learn.microsoft.com/en-us/windows-server/storage/file-server/ntfs-permissions-and-share-permissions

Topics

#folder permissions#NTFS permissions#network access#file sharing

Community Discussion

No community discussion yet for this question.

Full 70-698 Practice