nerdexam
CompTIA

LX0-104 · Question #597

Which of the following is true about the following share access properties? (Choose TWO correct answers.) [projects]path = /data/projects read only = noadmin users = timo, taki, +managers

The correct answer is B. The timo and taki users can manipulate files regardless of the file system permissions. C. +managers will be resolved as a Unix group.. In a Samba share, admin users grants listed users root-level privileges that override filesystem permissions, and a group name prefixed with a plus sign, like +managers, will be resolved as a Unix group.

Security

Question

Which of the following is true about the following share access properties? (Choose TWO correct answers.) [projects]path = /data/projects read only = noadmin users = timo, taki, +managers

Options

  • A+managers will be resolved as a Winbind group.
  • BThe timo and taki users can manipulate files regardless of the file system permissions.
  • C+managers will be resolved as a Unix group.
  • D+managers is a builtin default Samba group.
  • EThe "admin users" can be applied only to print shares.

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    78% (21)
  • D
    4% (1)
  • E
    15% (4)

Why each option

In a Samba share, `admin users` grants listed users root-level privileges that override filesystem permissions, and a group name prefixed with a plus sign, like `+managers`, will be resolved as a Unix group.

A+managers will be resolved as a Winbind group.

A group prefixed with `+` (e.g., `+managers`) is typically resolved as a Unix group, not a Winbind group; Winbind groups are usually specified with a domain prefix or an `@` symbol (e.g., `@DOMAIN\managers`).

BThe timo and taki users can manipulate files regardless of the file system permissions.Correct

Users specified in the `admin users` parameter, such as `timo` and `taki`, are granted root-level access to the share. This allows them to manipulate files and directories, including creating, deleting, and modifying, regardless of the underlying Unix file system permissions.

C+managers will be resolved as a Unix group.Correct

In Samba's `smb.conf` configuration, a group name prefixed with a plus sign (`+`) indicates that it should be resolved as a Unix group, meaning Samba will look up the `managers` group in the server's local Unix group database.

D+managers is a builtin default Samba group.

Samba does not have a built-in default group named `+managers`; it refers to a user-defined Unix group.

EThe "admin users" can be applied only to print shares.

The `admin users` parameter can be applied to any type of Samba share (e.g., disk shares, home shares) to grant administrative privileges, not exclusively to print shares.

Concept tested: Samba admin users and group resolution

Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html#ADMINUSERS

Topics

#Samba shares#access control#admin users#Unix groups

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice