Exam SK0-005 topic 1 question 302 discussion

Actual exam question from CompTIA's SK0-005

Question #: 302
Topic #: 1

An administrator gave Ann modify permissions to a shared folder called DATA, which is located on the company server. Other users need read access to the files in this folder. The current configuration is as follows:

The administrator has determined Ann cannot write anything to the DATA folder using the network. Which of the following would be the best practice to set up Ann's permissions correctly, exposing only the minimum rights required?

Show Suggested Answer

Suggested Answer: D 🗳️

by ccoli at June 21, 2024, 4:47 p.m.

Comments

Submit Cancel

PaytoPlay

1 month, 3 weeks ago

Here the best choice would be A. The correct setup would be to create a security group adding users to this security group. You would then add the security group to the "Share" giving the group the ability to access the resource over the network and give RW to the security group on the Share. Ann should then be given Modify at the "NTFS" level not Full control.

upvoted 1 times

...

SecNoob27639

3 months ago

Selected Answer: A

None of these are great, but A is the least bad. It maintains the same level of share permission for "non-Ann" users, aka the "Authenticated Users," while removing Ann's more restrictive "read" Share Permission. Ideally, there would be an answer with Ann having "modify" share permission and "modify" file permission, but since that isn't an option, A is the least bad. C isn't a good option, because it gives all users access to not only read, but also to modify the file, which is more privilege than they need.

upvoted 2 times

SecNoob27639

2 months, 1 week ago

After further consideration, I am wrong. C is the better option. Without expressly noted permissions, Ann would default back to Read only on Share, which is the same issue she currently has. C would resolve this issue, as Ann (who we assume falls under the domain of "Authenticated users") would now have Full Permissions on the share level, but Modify permissions at the file level. I have a better understanding of how File and Share permissions work now. Please disregard my previous answer, it appears to be C. Chat GPT will say that it's A as well, however by removing a specific permission for Ann from the Share, she will either default to Read Only, or we must assume that she falls under "Authenticated Users." In which case, C is the only one that gives her modify permissions without giving her more control than she should have.

upvoted 1 times

...

[Removed]

4 months, 1 week ago

Selected Answer: C

The answer is C. Authenticated Users encompass all users that have used an account to login, besides local accounts (which would then be Everyeone). B would also work, but is not the minimum rights required by the question. I kind of assume they're only showing the perms for Ann for the purpose of the question, cause if not, then yeah, like ccoli said, none of them work, since no other user will be able to read the files.

upvoted 1 times

...

ccoli

6 months ago

All of these answers are wrong. Ann would still be unable to modify with D.

upvoted 2 times

...

Exam SK0-005 All Questions

View all questions & answers for the SK0-005 exam

Exam SK0-005 topic 1 question 302 discussion

Comments

PaytoPlay

SecNoob27639

SecNoob27639

[Removed]

ccoli

SY0-701