SK0-005 Question #586: Real Exam Question with Answer & Explanation

Question

A technician creates a fileshare with the share permission set to Everyone -read only. The technician adds the following permissions at the NTFS level: The fileshare is mapped to all domain computers, and users report they are unable to access the data in the fileshare. Which of the following steps should the technician take next?

Options

• AChange the NTFS permissions to match the fileshare permissions.
• BChange the NTFS permissions to Domain Users Allow R.
• CChange the NTFS permissions as set to inherit permissions from parent.
• DChange the share permissions to Everyone R/W.

Explanation

When share and NTFS permissions combine, the most restrictive applies; if users can't access data with 'Everyone - Read Only' share permissions, the NTFS permissions must be too restrictive and need to grant at least read access to 'Domain Users'.

Common mistakes.

• A. Changing NTFS permissions to match 'Everyone - Read Only' would work, but granting read access to 'Domain Users' is a more targeted and often preferred approach in a domain environment.
• C. Setting NTFS permissions to inherit from the parent might or might not grant the necessary read access, depending on the parent folder's permissions, and it's not a direct solution to the reported access issue.
• D. Changing share permissions to 'Everyone R/W' would be a security risk as it grants write access to everyone and still wouldn't fix the underlying issue if NTFS permissions are denying read access.

Concept tested. Share vs. NTFS permissions interaction

Reference. https://learn.microsoft.com/en-us/windows/win32/fileio/how-share-and-ntfs-permissions-work

No community discussion yet for this question.