ch 10 - File and Share Access

You need to use the New Share wizard on a Windows server to create a new share for the C:\Shares\WidgetProject folder. Sales reps for your organization will connect to the share using Windows notebook systems You want to configure the share so that Windows will hide the file or folder from users that do not have at least read permissions to a file or folder. Which option on the settings screen should you enable.

Access-Based enumeration

On your Windows server, you share the D:\Reports folder using a share name Reports. You need to configure permissions on the shared folder as follows: -Members of the Accounting group should be able to view files but not be able to modify them. -Phil, a member of the Accounting group, needs to be able to open and edit files in the Shared folder.

Add the Accounting group and assign the Read permission. Add the Phil user account and assign Read/Write permission.

The C:\Shares\WidgetProject folder on your windows server has been shared with network users. The server is a member of the westsim.com Active Directory domain. The westsim.com\Users group has been granted the following Allow NTFS permissions: -Read and execute - List folder contents -Read The westsim.com\Administrators group has been granted the allow full control NTFS permission. In addition, the Everyone principal has been assigned the following allow share permissions: -Full control -Change -Read the smarsden user is a member of the westsim.com\Administrators group. She accesses data in the folder through the network share from her Windows workstation.

Allow full control

The C:\Shares\WidgetProject folder on your windows server has been shared with network users. The server is a member of the westsim.com Active Directory domain. The westsim.com\Users group has been granted the following Allow NTFS permissions: -Write -Read and execute - List folder contents -Read In addition, the Everyone principal has been assigned the allow read share permission. the smarsden user is a member of the westsim.com\Users group. She accesses data in the folder through the network share from her Windows workstation. What permissions does this user have to data in the folder?

Allow read

The C:\Shares\WidgetProject folder on your windows server has been shared with network users. The server is a member of the westsim.com Active Directory domain. The westsim.com\Users group has been granted the following Allow NTFS permissions: -Read and execute - List folder contents -Read In addition, the Everyone principal has been assigned the following allow share permissions: -Full control -Change -Read the ksanders user is a member of the westsim.com\Users group. She accesses data in the folder through the network share from her Windows workstation. What permissions does this user have to data in the folder?

Allow read and execute, list folder contents, and read

The C:\Shares\WidgetProject folder on your windows server has been shared with network users. The server is a member of the westsim.com Active Directory domain. The westsim.com\Users group has been granted the following Allow NTFS permissions: -Write -Read and execute - List folder contents -Read In addition, the Everyone principal has been assigned the allow read share permission. the jmarshall user is a member of the westsim.com\Users group. She accesses data in the folder by using Remote Desktop to establish a remote access session on the server. What permissions does this user have to data in the folder?

Allow write, read and execute, list folder contents, and read.

You need to control access to the D:\Reports folder as follows: Members of the Accounting group should be able to open and view all files but not modify them.

Assign Allow Read & execute, List folder contents, and Read to the accounting group. For the Mary user account, deny the write permission.

Stan needs to read all of the documents within the SaleResearch share and its subfolders. Stan does not need to make changes to these documents. You need to give Stan appropriate permissions without giving him unnecessary permissions. What should you do?

Assign Stan the allow read NTFS permission to F:\Sales\Research

You need to share a folder that contains data used by your accounting department. You want Phil, the manager of the department, to be able to add and remove files. You want members of the department to be able to connect to the share and see the files it contains, but you do not want them to have the ability to make changes. Everyone else in the company sh0ould be blocked from connecting to the share. There is a global group called Accounting that contains all the accounting department users, including Phil. You need to configure permissions on the share. What should you do?

Assign allow change permission for Phil, Allow Read for Accounting, and nothing else.

You need access to the D:\Reports folder as follows: - Members of the Accounting group should be able to open and view all files, but not modify them. - Mary needs to be able to modify existing files in the folder and add new files to the folder, but should not be able to delete or rename files. Mary is a member of the account group. You want to assign NTFS permissions taking the least amount of actions possible. What should you do?

Assign allow read and execute, list folder contents, and read to the Accounting group. Assign allow write to Mary.

On your windows server, you share the D:\Apps folder using a share name of Apps. You need to configure permissions to the share as follows: -Members of the Appusers group should be able to open and view files in the shared folder. -user JohnS should not have any access to files in the shared folder. JohnS is a member of the Appusers group.

Assign allow read permission to Appusers, and assign Deny Read permission to JohnS.

You are configuring access for a shared folder on Windows Server. There is a global group called Appusers who need read-only access. However, ther is a member of Appusers, jsmith, who should not have any access at all. How can you configure your share so that the members of Appusers have access but jsmith does not while creating the least disruption to your existing administrative structure?

Assign allow read permission to Appusers, and assign Deny Read permission to jsmith

You need to give Jim the permissions intended for the Managers group and let him update files in the Reports share. What should you do?

Change the Reports share permissions for the Everyone group to allow full control.

On your Windows Server, you share the D:\Promo folder using a share name of Promo. The mary user account is a member of the Training group. NTFS permissions allow all access. Mary needs to be able to edit documents in the shared folder but cannot. You need to modify the share permissions to allow her the necessary access. (multiple choices)

Change the Training group permission to allow Read. Remove the Mary user account from the Training group.

You are the network administrator for a small manufacturing company. You have ten regional sales people who travel extensively and have been provided Windows laptop computers. The mobile users have complained that, although they can take copies of important files with them into the field, occasionally they have been caught with out of date documents because on one told them the files had been updated. Additionally, some of these files need to be distributed to all the other sales staff.

Configure Offline Files for the folder that contains these files.

You have a folder on your windows server that you would like members of your development team to access. You want to restrict network and local access to only specific users. All other users must not be able to view or modify the files in the folder. What should you do? (Select two)

Configure both share and NTFS permissions. Place the files on an NTFS partition.

You are the server administrator for the Srv12 server. This server is running the File Services role and is used for user home folders. Each user has a folder that they can use for storing personal files. Management wants a solution that meets the following requirements: - Allow only the specified user to save files in their home folder. -User should not be allowed to view or edit files in other user's home folders. -The list of files and folders that users can view should show only the files that they have rights to access. What should you do?

Configure share and NTFS permissions with access-based enumeration.

You are the network administrator for Corpnet.com. A small group of software developers in your organization have to use Linux workstations. You are creating a share for these Linux users on your file server, which is named File1. How can you allow clients running Linux-based operating systems to connect to a share on File1?

Create the share using the Network File System (NFS).

The C:\Shares\WidgetProject folder on your windows server has been shared with network users. The server is a member of the westsim.com Active Directory domain. The westsim.com\Research group has been granted the following Allow NTFS permissions: -Read and execute - List folder contents -Read In addition, the Everyone principal has been assigned the allow read share permission. the vhammer user accesses data in the folder through the network share from her Windows workstation. is is a member of the westsim.com\Users and the westsim.com\Research groups. the vhammer user also has been assigned the deny read NTFS permission to the folder. What permissions does this user have to data in the folder?

Deny read

The D:\ drive in your Windows Server 2012 R2 server is formatted with NTFS. The Sales group on your computer has been given.

Edit the properties for the file; assign Mary the Deny full control permission.

You are the manager for Windows servers at your company. You have configured Windows Server Backup to take regular backups once per day and save those backups to an external disk. You find that users working on a new project are constantly overwriting files and asking you to restore older versions of files that exist on backups from as far back as a week ago. You would like to implement a solution that allows users to restore files without an administrator's help. What should you do?

Enable VSS on the volume that holds user data.

You are the server administrator for the westsim.com domain. You have a server named FS12 that holds a shared folder named Reports. Within this folder, subfolders have be created for each company department. All company employees hjave read access to the shared folder. The board of directors uses a subfolder in the shared folder named BoardReports for their reports. They would like this subfolder to only be visible to members of the board of directors and specific people that they authorize to see the folder and its contents. What should you do?

Enable access-based enumeration on the shared folder. Configure NTFS permissions on the BoardReports folder to control access.

Which of the following is a task that you are not able to perform with the Volume Shadow Copy Service(VSS)?

Enable shadow copies on specific folders or files

You are the owner of the D:\Reports folder. Judith needs to be able to see the files and subfolders in the D:\Reports\ folder.

Grant Read & Execute to Judith; Modify to Dalton.

You examine the NTFS permissions for the folder and see share and NTFS permissions shown in the exhibits. No other permissions are granted or denied. Sally is not a member of any other groups. You want to make sure Sally and other members of the Sales group can open, edit, save, and delete files to the Public shared folder. You want to make as few assignments as possible without affecting permissions for other users. What should you do?

Grant everyone the change share permission. Grant the Sales group the allow modify NTFS permission.

You've configured an NFS share on your Windows server to support Linux client systems already joined to your domain. Click the options in the NFS advanced Sharing window you would use to allow these clients to connect to the share (Select 3)

Kerebos v5 Privacy and authentication Kerebos v5Integrity and authentication Kerebos v5 authentication

you have a folder on your windows server that you would like to share with members of your development team. Users should be able to view and edit any file in the shared folder. You share the folder and give everyone full control permission to the shared folder. Users connect to the shared folder and report that they can open the files, but they cannot modify any of the files. What should you do?

Modify NTFS permissions on the folder.

You manage a windows server. For the D:\Reports\Finances.xls file, you explicitly grant the mary user account the allow modify NTFS permissions. You need to move the file from the existing folder to the D:\confidential folder. You want to keep the existing NTFS permissions on the file. You want to accomplish this with the least amount of effort possible. What should you do?

Move the file to the new folder

You need to control access to the D:\Reports folder as follows: -Members of the Accounting group should be able to open and view all files, edit them, add new files, and rename and delete files. -Mary needs to be able to open and view files, but should not be able to modify the files, rename files, or delete them.

Remove Mary from the Accounting group. Assign Allow Read & execute, List folder contents, Read, and Modify to the Accounting group. Assign Allow Read & execute, List folder contents, and Read to Mary.

You have a windows server that is maintained by multiple administrators. Sally wants to access a file in the Reports folder. A group named Sales has been granted the full control permission to the reports folder and all subfolders and files. You add Sally as a member of the Sales group, but she still cannot access the file that she needs. You want to let Sally access the reports folder. What should you do?

Remove Sally from any other groups that have been explicitly denied access to the Reports folder.

You recieve a phone call from Sally, a member of the Sales group and Assistants group, claiming that she cannot save a file to the Public shared folder. You want to make sure that member s of the Sales group (who are not members of the Assistants group) can save new files to the Public shared folder and access, update, and delete existing files in the Public share. You want to continue to ensure that members of the Assistants group cannot modify files in the Public shared folder even if they are members of the Sales group. However, you also want to let Sally update files in the Public share. What should you do?

Remove Sally from the Assistants group.

You have decided to create a shared folder that will contain sensitive information about planned changes in the personnel structure. Most users will be denied access to the share, which is name REORG. You have successfully created the share and set appropriate permission.

Remove the REORG share. Share the folder again as REORG$ with the same permissions as before.

Mr. Yamashita needs to be able to modify the contents of the promo share, a shared folder on one of your Windows servers. The share has been assigned the following permissions: Mr yamashita is a member of each of these groups. (Multiple answers)

Remove the Training group from the share. Remove Mr. Yamashita's user account from the Training group. Change the Training group's permission to allow Read.

You are the network administrator for Corpnet.com. A small group of software developers in your organization have to use Linux workstations. You are creating a share for these Linux users on your file server, which is named File1. Which feature must be installed on the Windows server to accomplish this?

Server for NFS

Sally needs to read and modify all files in the SalesDocs folder except StyleGuide.doc. Sally should be able to read StyleGuide.doc, but not modify it. What should you do?

Set sally's NTFS permission for StyleGuide.doc to deny write.

Your Windows Server has a folder named D:\SaleDept. The D: drive is formatted with FAT32.

Share the SalesDept folder. Grant Read permission to the Sales group and Change permission to the SalesAdmin group. Remove Everyone from the access control list.

SRV03 is a Windows server that holds the salesdept folder. This folder contains documents specific to the sales department. You create two user groups: -The sales group includes all members of the sales department -The sales admin group includes about ten members of the sales department who manage sales related documents

Share the SalesDept folder. Grant read permission to Sales group and full control permission to the SalesAdmin group. Remove the Everyone group.

Sally, a member of the sales department, is borrowing a laptop computer from her supervisor to do some work from home in the evenings. Sally contacts you and indicates that she cannot access C:\Reports folder on the laptop. This folder contains documents that she needs to edit. (Choose Two)

Take ownership of the C:\Reports folder. Grant Sally the Allow Modify permission to the C:\Reports folder

An employee has quit under difficult circumstances. Unfortunately, the user had several files that are needed, and before the employee left, they assigned Deny Full Control permission to Domain Users to all the files and folders.

Take ownership of the files, and change the permissions.

You are the network administrator for westsim.com. The network consists of a single domain. The company has a file server named FS1 that hosts a share named SalesData for the sales department. You need to configure the SalesData share so that users will be allowed to view only the files and folders to which they have rights. What should you do?

Use the Shares panel in Server Manager to enable Access-based Enumeration(ABE) on the Sales Data share.

Your windows server has two volumes, C: and D: For the D:\Reports\Finances.xls file, you explicitly grant the Mary user account the allow modify NTFS permission. You need to move the file from the existing folder to the C:\Reports2 folder. You want to keep the existing NTFS permissions on the file. You want to accomplish this with the least amount of effort possible. What should you do?

Use the robocopy command to copy the file to the C:\Reports2 folder.

You are a technical consultant for many businesses in your community. One of your clients, a small law firm, has a single Active Directory domain and two Windows servers. Both servers are configured as domain controllers while also serving as file and printer servers. This client is calling you on a regular basis because users are deleting or damaging their files. You must visit the client's site and restore the files from backup. Your client has asked you to create an alternate solution. What should you do?

implement shadow copies on the relevant data.

You have created an NFS share on your file FS1 server in the corpnet.com domain. The path of the share folder is C:\Shared\NFSShare. Use the drop down list to fill in the blank in the following to correctly enter the command that will mount this share

mount-t nfs

Click the option in the NFS advanced Sharing window you would use to allow these clients to use anonymous access when connecting to the share

no server authentication

SRV02 holds a shared folder named Forecast for the Managers group. Maria is a member of the Managers group. You would like to grant Managers group full control to the folder named Forecast, but limit Maria's access to read only. you have added the maangers group to the access list for the forecast folder and granted full control access. you now need to limit marias access to the folder. what should you do? (choose two)

remove marias account from the managers group and grant read access. add maria to the ntfs permissions for the folder. grant read access.