Drag and Drop Question
A company has an Active Directory Domain Services (AD DS) domain. All client computers run
Windows 8.1. The company has three departments named Accounting, Human Resources (HR),
and Marketing. User account objects are stored in their respective departmental AD security groups
and have full access to shared folders for each department. A new company policy requires that
the following access rules are in place:
– Users must have complete access only to their department’s shared folder.
– Accounting department users must be able to change files in the HR
folder.
– HR department users must be able to change files in the Marketing folder.
– Marketing department users must be able to change files in the
Accounting folder.
You need to comply with the company policy. Which permissions should you assign? (To answer,
drag the appropriate security group or groups to the correct location or locations in the answer area.
Security groups may be used once, more than once, or not at all. You may need to drag the split
bar between panes or scroll to view content.)
Answer: 
Although this applies the same to Win10, is anyone noticing a lot of Windows 8 questions in this particular test?
The question might mean “Full Control” by “complete access”. The difference between modify and full is the ability for a user to change permissions on files. Usually in the real world, that is a security risk and frowned on. Kind of an easy question, just make sure you need to know who needs to change who’s files.