nerdexam
Microsoft

70-698 · Question #159

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…

The correct answer is B. No. The proposed solution does not meet the goal because default NTFS permissions in a Windows 10 Enterprise domain environment do not grant standard users write access to drive root folders.

Configure authorization and authentication

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this scenario, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are the administrator for a company. All devices run Windows 10 Enterprise and are members of the Adatum.com domain. All drives on the devices are formatted with the NTFS file system and have the default permissions assigned. You have a device which is used by multiple users and stores information for a specific project. The project team members are members of a group named ProjectX. The system is also used by other people that are not members of the ProjectX team. All files for ProjectX are stored in a folder with the path E:\ProjectX. You have the following requirements:

Only members of the ProjectX group must have all permissions on the folder and all of the files in it. ProjectX members should not be granted any specific rights to any other folders. You need to meet the requirements. Solution: You disable inheritance on the E:\ProjectX folder and specify the Copy option. You assign the Full Control permission to the Project X group. Does the solution meet the goal?

Options

  • AYes
  • BNo

How the community answered

(48 responses)
  • A
    19% (9)
  • B
    81% (39)

Why each option

The proposed solution does not meet the goal because default NTFS permissions in a Windows 10 Enterprise domain environment do not grant standard users write access to drive root folders.

AYes

This is incorrect because default NTFS permissions restrict standard domain users to read-only access - group membership alone does not grant write permissions without an explicit NTFS permission assignment.

BNoCorrect

Default NTFS permissions on Windows 10 Enterprise drives grant non-administrative users only Read and Execute access, not Modify or Full Control. Simply placing project team members into a group without explicitly assigning that group at least Modify-level NTFS permissions on the folder does not enable them to change files. The solution must explicitly configure both the NTFS permission and, if accessed over the network, the share permission to allow write operations.

Concept tested: Default NTFS permissions and explicit group permission assignment

Source: https://learn.microsoft.com/en-us/windows-server/storage/file-server/ntfs-permissions-and-share-permissions

Topics

#BitLocker#drive encryption#NTFS#domain devices

Community Discussion

No community discussion yet for this question.

Full 70-698 Practice