8.6.9 Client Pro Practice Questions

You manage a Windows system and need to control access to the D:\Reports folder as follows: - Members of the Accounting group should be able to open, view, edit, and add files. They should not be able to delete or rename them. - Mary needs to be able to open and view files, but she should not be able to modify them. Mary is a member of the Accounting group. Taking the least amount of actions possible and affecting existing permissions as little as possible, how can you assign these NTFS permissions? Assign Allow to the Read & execute, List folder contents, Read, and Modify permissions for the Accounting group. For the Mary user account, assign Deny to the Modify permission. Assign Allow to the Read & execute, List folder contents, Read, and Write permissions for the Accounting group. For the Mary user account, assign Deny to the Write permission. Remove Mary from the Accounting group. Assign Allow to the Read & execute, List folder contents, Read, and Modify permissions for the Accounting group. Assign Allow to the Read & execute, List folder contents, and Read permissions to Mary. Remove Mary from the Accounting group. Assign Allow to the Read & execute, List folder contents, Read, and Write permissions for the Accounting group. Assign Allow to the Read & execute, List folder contents, and Read permissions to Mary.

Assign Allow to the Read & execute, List folder contents, Read, and Write permissions for the Accounting group. For the Mary user account, assign Deny to the Write permission. EXPLANATION Assign Allow to the Read & execute, List folder contents, Read, and Write permissions for the Accounting group to allow group members to open, edit, and add files in the directory. As a member of the Accounting group, Mary receives the same permissions to the folder as the group. To prevent Mary from editing files in the directory, you can simply assign Deny to the Write permission. This preserves the Read & execute, List folder contents, and Read permissions she receives from the Accounting group. Removing Mary from the group and assigning the appropriate permissions would work but might also prevent her from having the necessary permissions she needs to access other resources as a member of the Accounting group. The Modify permission includes all permissions except Full control and allows users to delete and rename files. REFERENCES TestOut Client Pro - 8.6 NTFS Permissions

Match the folder permissions description with the proper permission level. Each permission level will only be used once. Drag Full control Modify Read & execute List folder contents Read Write Drop Can open files and run programs in the folder. Can open files, but not change anything. Can do anything with folder and subfolders including changing permissions and ownership. Can see files and folders, but not open any. Can do anything with folder and subfolders except change permissions or ownership. Can create new files and folders and change existing files.

Can open files and run programs in the folder Read & execute Can open folders, but not change anything Read Can do anything with folder and subfolders except changing permissions or ownerships Modify Can create new files and folders and change existing files Write Can do anything with folders and subfolders including changing permissions and ownerships Full control Can see files and folders, but not open any. List folder contents REFERENCES TestOut Client Pro - 8.6 NTFS Permissions

Which special permission specifies whether a user can make changes to the end of the file but not change, delete, or overwrite existing data? List folder / read data Create files / write data Traverse folder / execute file Create folders / append data

Create folders / append data EXPLANATION The Create folders / append data special permission specifies whether a user can make changes to the end of the file. It does not, however, allow him or her to change, delete, or overwrite existing data. The Create files / write data special permission specifies whether a user can change files or overwrite data. The Traverse folder / execute file special permission specifies whether a user can run an executable. The List folder / read data special permission specifies whether a user can view data in files. REFERENCES TestOut Client Pro - 8.6 NTFS Permissions

The D: drive in your computer has been formatted with the New Technology File System (NTFS). The Sales group on your computer has been given Allow Modify permissions to the D:\Sales folder. The Mary user account is a member of the Sales group. You want to accomplish the following: - Mary should not be allowed access to the D:\Sales\2010sales.doc file. = Mary should be able to read, write, and create new files in the D:\Sales folder. Your solution should not affect the abilities of other Sales group members to access files in the D:\Sales folder. What should you do? Edit the properties for the file and assign Mary the Deny Full control permission. Edit the properties for the file and assign the Sales group the Deny Full control permission. Edit the properties for the folder and assign Mary the Deny Full control permission. Edit the properties for the folder and assign the Sales group the Deny Full control permission. Remove Mary from the Sales group.

Edit the properties for the files and assign Mary the Deny Full control permission EXPLANATION To prevent Mary from accessing the specific file, assign the user account the Deny Full control permission to the file. Deny permissions override Allow permissions. Because Mary is still a member of the Sales group, she will have access to the remaining files in the directory. Removing Mary from the group or denying permission to the folder would prevent her from accessing all files in the folder. Denying permissions for the group would affect all group members and not just one user. REFERENCES TestOut Client Pro - 8.6 NTFS Permissions

You share a single Windows system with Judith and Dalton. You are the owner of the D:\Reports folder. Judith needs to be able to see the files and subfolders in the D:\Reports folder. Dalton needs these abilities as well as the ability to delete folders. Which rights must you assign to each user to give them the necessary NTFS permissions to the D:\Reports folder? Grant the List folder contents permission to Judith and the Full control permission to Dalton. Grant the Read & execute permission to Judith and the Modify permission to Dalton. Grant the Read & execute permission to both users. Grant the Modify permission to both users.

Grant the Read & execute permission to Judith and the Modify permission to Dalton EXPLANATION Always assign the most restrictive permission that still allows the user to do his or her job. The Read & execute permission is the minimum permission required to traverse folders (move through a folder to a subfolder). The Modify permission is the minimum permission required to delete folders. Granting the Read & execute permission to each user would let Judith traverse folders, but it would not let Dalton delete them. Granting the Modify permission to each user would let Judith traverse folders and let Dalton delete them. But it would also allow Judith to delete folders. REFERENCES TestOut Client Pro - 8.6 NTFS Permissions Mark this question for review

You have created a new folder and added the Authenticated Users group. Which basic permissions will be applied by default? (Select three.) Modify Delete Write Read List folder contents Read & execute

List folder contents Read Read & execute EXPLANATION When a new group is added to a folder's security, the Read, Read & execute, and List folder contents permissions are enabled by default. Any other permissions must be explicitly assigned. REFERENCES TestOut Client Pro - 8.6 NTFS Permissions

For the D:\Reports\Finances.xls file on your Windows system, you explicitly grant the Mary user account the Allow Modify NTFS permission. You need to move the file from the existing folder to the D:\Confidential folder. You want to keep the existing NTFS permissions on the file. How can you accomplish this with the least amount of effort? Copy the file to the new folder and delete the original file. Run the icacls command and then delete the original file. Move the file to the new folder. Copy the file to the new folder and run the icacls command. Delete the original file afterward.

Move the file to the new folder EXPLANATION When you move a file or folder to a different location on the same NTFS partition, the NTFS permissions are retained. Copying the file removes any explicit permissions set on the file unless you use the xcopy or robocopy commands. Use the icacls command to configure NTFS permissions from Command Prompt. While you could reconfigure the NTFS permissions after copying the file, that would require more effort than simply moving the file. REFERENCES TestOut Client Pro - 8.6 NTFS Permissions

You have a Windows system that is shared by multiple users. Sally wants to access a file in the Reports folder. A group named Sales has been granted the Allow Full control permission to the Reports folder and all its subfolders and files. You add Sally as a member of the Sales group, but she still cannot access the file that she needs. How can you let Sally access the Reports folder? Remove Sally from the Sales group and add her to the Sales group again. Remove Sally from any other groups that have been explicitly denied access to the Reports folder. Delete and recreate Sally's user account on the local computer. Create a new group, give it rights to the Reports folder, and then add Sally to the group.

Remove Sally from any other groups that have been explicitly denied access to the Reports folder EXPLANATION If a user is a member of a group that has permission to access a folder but still cannot access the folder, the user could be explicitly denied access to the folder by virtue of membership in another group. REFERENCES TestOut Client Pro - 8.6 NTFS Permissions

An employee was just fired. Before he returned his Windows notebook, he assigned the Deny Full control permission to the group named Everyone. This affected all the files and folders on the system. All users, including you, are now blocked from accessing these important files. As an administrator, what can you do to make these files available as quickly as possible? Restore the volume from backup and specify the Full control for Everyone permission on the restored files. Take ownership of the files and change the permissions. Log on as a local user with administrative rights. Local users are not members of Domain Users by default. Log on as Administrator and change the permission on the files.

Take ownership of the file and change the permissions EXPLANATION The owner of a file can always change the NTFS permissions, even when specifically denied access to the file itself. The Administrators group has the Take Ownership permission. This permission allows you to become the owner of the affected files and change the permissions. Simply logging on as Administrator will not allow you to change the permissions because Administrator is a member of Domain Users. Restoring from backup allows you to remove the existing permissions. But this is not the fastest way to do so. REFERENCES TestOut Client Pro - 8.6 NTFS Permissions

Your Windows system has two hard drives named C: and D:. For the D:\Reports\Finances.xls file, you explicitly grant the Mary user account the Allow Modify NTFS permission. You need to move the file from the existing folder to the C:\Reports2 folder. You want to keep the existing NTFS permissions on the file. How can you accomplish this with the least amount of effort? Use the robocopy command to copy the file to the C:\Reports2 folder. Using Windows Explorer, copy the file to the C:\Reports2 folder. Using Windows Explorer, move the file to the C:\Reports2 folder. Reconfigure the NTFS permissions on the file afterward. Using Windows Explorer, move the file to the C:\Reports2 folder.

Use the robocopy command to copy the file to the C:\Reports2 folder EXPLANATION If you copy or move a file to a different NTFS partition, the explicit permissions are removed. Use the robocopy or xcopy command line utilities to copy files while maintaining the NTFS permissions (even when copying between partitions). While you could reconfigure the NTFS permissions after moving the file, that would require more effort than simply copying the file with the NTFS permissions. REFERENCES TestOut Client Pro - 8.6 NTFS Permissions