You have a file server named File1 that runs Windows Server 2012 R2.
File1 contains a shared folder named Share1. Share1 contains an application named
SalesAppl.exe.
The NTFS permissions for Share1 are shown in the following table.
The members of L_Sales discover that they cannot add files to Share1. Domain users can
run SalesAppl.exe successfully.
You need to ensure that the members of L_Sales can add files to Share1.
What should you do?
A.
Add L_Sales to the Domain Users group.
B.
Edit the NTFS permissions.
C.
Add the Domain Users group to L.Sales.
D.
Edit the Share permissions.
Explanation:
The least restrictive permission applies here, so the users from L_sales have read &
execute, write… in order to add files they need the NTFS permission called MODIFY.
Based on NTFS permissions:
Modify: Users can view and modify files and file properties, including deleting and adding
files to a directory or file properties to a file.
Correct answer is D, change the share permissions.
Domain users can run apps, that only requires read & execute access. So we can ignore this fact.
L_Sales have NTFS write access, this lets them write new files.
The only thing we are not told is the share permissions, They must be set to read only.
PS, I’ve tested this in my lab.
You must change the share permissions.
Because NTFS Write: Permits adding of files and subfolders
The answer is āCā
NTFS Write do not allow adding files.
The Write Extended Attributes permission does not imply creating or deleting files or folders, it only includes the permission to make changes to the extended attributes of an existing file or folder. Source:
http://www.ntfs.com/ntfs-permissions-file-advanced.htm
So, answer B is correct.
You are looking at the advanced permissions. When you assign the write basic permission it assigns several advanced permissions with it. See http://www.ntfs.com/ntfs-permissions-file-folder.htm
Answer is D
Write permission to Shared folders – User can read, write, and create files or folders in this folder.
I concur, D
The NTFS permission levels are as follows:
(Full Control)
Users can do anything to the file, including taking ownership of it. It is recommended that you grant this level of access only to administrators.
(Modify)
Users can view and modify files and file properties, including deleting and adding files to a directory or file properties to a file. Users cannot take ownership or change permissions on the file.
(Read & Execute)
Users can run executable files, including scripts.
(List Folder Contents)
Users can view a list of a folder’s contents.
(Read)
Users can view files and file properties.
(Write)
Users can write to a file.
You will find this at:
https://technet.microsoft.com/en-us/library/Cc784990(v=WS.10).aspx
As you can see, the (Write) NTFS permission does not say anything about adding files, only that you can write to a file. The only permission that says it can add files is the (Modify) NTFS permission.
Write Attributes
– Allows or denies changing the attributes of a file or folder, for example, “read-only” or “hidden”.
– The Write Attributes permission does not imply creating or deleting files or folders, it only includes the permission to make changes to the attributes of an existing file or folder.
Correct answer is:
B. Edit the NTFS permissions.
Before I tried it in my lab I would have agreed to JD.
But now I know, that a user with read&execute and write permission is able to create files and folders.
Even when the user1 has only read and write it was able to create files, allthough a message pop said that it needs additional permissions.
(No, I didn’t use an administrative account and yes, I stopped inheritance and removed all permissions exept Administrators and System.)
These are the fact’s, but I am not sure what to choose in the test, because sometimes the “correct answers”(which give you the points) have nothing to do with the real world š
I would choose D here, since Write permits adding files, and between share and ntfs permissions, the most restrictive permissions apply, i suppose share permissions are in command here. š
Reference:
“Write – Permits adding of files and subfolders”
https://technet.microsoft.com/en-us/library/bb727008.aspx
“When using share permissions and NTFS permissions together, if there is a conflict in the configuration, the most restrictive permission prevails”
http://www.ntfs.com/ntfs-permissions-combined.htm
Just tested it in an 2012 server , just wirte permissons (without Modify) can create files. But in a share folder if the permissoes is just with read , even if you have full access NTFS you cant write in the share.
So i will stay with D.
I also checked and I agree with you.
Answer is D. L_Sales group need change permissions in Share Tab
Questions like this can make anyone with the actual knowledge to fail the test, when it’s so difficult to understand. Understand the concept of making questions that require you to read it properly, but this i rediculus.
Passed the 70-410 exam few days ago, scored 860!
Around 8-10 new questions, one about subnetting, one in regards to disabling windows update via powershell, one about installing/promoting machines via powershell and so on.
Learned 70-410 dumps from http://www.passleader.com/70-410.html, 100% valid with all corrected answers!
Your Mumma scored 860