During an anonymous penetration test, Jane, a system administrator, was able to identify a shared print spool directory, and was able to download a document from the spool. Which statement BEST describes her privileges?
A.
All users have write access to the directory.
B.
Jane has read access to the file.
C.
All users have read access to the file.
D.
Jane has read access to the directory.
…. No, just …. NO! Where, and how, do they come up with C???
And quote… “Which statement BEST describes her privileges?” Note the word HER??
Jane MUST have read access to the directory, as read access to the file itself would be useless if she could not access the directory. The question does NOT ask about any other persons read access.
“Which statement BEST describes her privileges?”, agree with the comment. Jane is a System Admin with access to directory and files. Agree?
Well, if she has access to the file during the penetration test, ALL users must have access in order for her to gain access to that file.
She should not have gain special access or permissions during the Pen Test right? Otherwise it would not be a good test.
So because she had access, all the users should have access, otherwise she would not be able to reach it.