SY0-301 · Question #451
The Human Resources department has a parent shared folder setup on the server. There are two groups that have access, one called managers and one called staff. There are many sub folders under the…
The correct answer is B. Implicit deny on the payroll folder for the staff group. Since the parent folder's ACL propagates to all subfolders via inheritance, simply removing the staff group from the payroll folder (A) would not work-the inherited permissions would still grant access. Removing inheritance entirely (D) is more disruptive because it breaks all…
Question
The Human Resources department has a parent shared folder setup on the server. There are two groups that have access, one called managers and one called staff. There are many sub folders under the parent shared folder, one is called payroll. The parent folder access control list propagates all subfolders and all subfolders inherit the parent permission. Which of the following is the quickest way to prevent the staff group from gaining access to the payroll folder?
Options
- ARemove the staff group from the payroll folder
- BImplicit deny on the payroll folder for the staff group
- CImplicit deny on the payroll folder for the managers group
- DRemove inheritance from the payroll folder
How the community answered
(37 responses)- A5% (2)
- B81% (30)
- C11% (4)
- D3% (1)
Explanation
Since the parent folder's ACL propagates to all subfolders via inheritance, simply removing the staff group from the payroll folder (A) would not work-the inherited permissions would still grant access. Removing inheritance entirely (D) is more disruptive because it breaks all inherited permissions for all groups, requiring manual reconfiguration. An explicit deny rule for the staff group on the payroll folder (B) is the quickest fix because deny rules override inherited allow permissions in ACL evaluation. This surgically blocks only the staff group on that one folder without affecting other groups or requiring inheritance to be broken. Option C is wrong because it targets managers, not staff.
Topics
Community Discussion
No community discussion yet for this question.