98-365 · Question #11
Which type of folder permissions takes precedence?
The correct answer is A. Explicit Deny permissions. Explicit Deny permissions override all other permissions, including explicit Allow permissions and inherited permissions, ensuring access is blocked regardless of other rules.
Question
Which type of folder permissions takes precedence?
Options
- AExplicit Deny permissions
- BExplicit Allow permissions
- CInherited Deny permissions
- DInherited Allow permissions
How the community answered
(27 responses)- A85% (23)
- B4% (1)
- C4% (1)
- D7% (2)
Why each option
Explicit Deny permissions override all other permissions, including explicit Allow permissions and inherited permissions, ensuring access is blocked regardless of other rules.
Explicit Deny permissions always take precedence over all other permissions, including explicit Allow, inherited Deny, and inherited Allow permissions. This 'deny trumps all' rule ensures that if a user is explicitly denied access to a resource, they will not be able to access it, even if other permissions would otherwise grant access.
Explicit Allow permissions are overridden by explicit Deny permissions and can be combined with inherited permissions, but they do not take absolute precedence over Deny rules.
Inherited Deny permissions are less powerful than explicit Deny permissions and can be overridden by explicit Allow permissions.
Inherited Allow permissions are the least powerful and can be overridden by explicit Allow, explicit Deny, and inherited Deny permissions.
Concept tested: NTFS permission precedence
Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-compliance-300-guide/chapter-5-file-and-folder-permissions#ntfs-permissions-overview
Topics
Community Discussion
No community discussion yet for this question.