GSNA · Question #19
The SALES folder has a file named XFILE.DOC that contains critical information about your company. This folder resides on an NTFS volume. The company's Senior Sales Manager asks you to provide…
The correct answer is A. The Sales group has the Full Control permission on the SALES folder. Although NTFS provides access controls to individual files and folders, users can perform certain actions even if permissions are set on a file or folder to prevent access. If a user has been denied access to any file and he has Full Control rights in the folder on which it…
Question
The SALES folder has a file named XFILE.DOC that contains critical information about your company. This folder resides on an NTFS volume. The company's Senior Sales Manager asks you to provide security for that file. You make a backup of that file and keep it in a locked cupboard, and then you deny access on the file for the Sales group. John, a member of the Sales group, accidentally deletes that file. You have verified that John is not a member of any other group. Although you restore the file from backup, you are confused how John was able to delete the file despite having no access to that file. What is the most likely cause?
Options
- AThe Sales group has the Full Control permission on the SALES folder.
- BThe Deny Access permission does not restrict the deletion of files.
- CJohn is a member of another group having the Full Control permission on that file.
- DThe Deny Access permission does not work on files.
How the community answered
(30 responses)- A70% (21)
- B17% (5)
- C10% (3)
- D3% (1)
Explanation
Although NTFS provides access controls to individual files and folders, users can perform certain actions even if permissions are set on a file or folder to prevent access. If a user has been denied access to any file and he has Full Control rights in the folder on which it resides, he will be able to delete the file, as Full Control rights in the folder allow the user to delete the contents of the folder. Answer: C is incorrect. In the event of any permission conflict, the most restrictive one prevails. Moreover, the question clearly states that John is not a member of any other group. Answer: B, D are incorrect. The Deny Access permission works on files.
Topics
Community Discussion
No community discussion yet for this question.