THIS METHOD DOES NOT ACCOMPLISH THE DESIRED EFFECT
5.
Correct Answers: D
A. Incorrect:
This method does not accomplish the desired effect. Although the
user Todd does not have explicit access to the folder, he has Change permissions
because of his implicit membership in the Everyone group. His effective privileges
are Read because of the restriction placed on the share.
B. Incorrect:
This method does not accomplish the desired effect. The No Access
permission always overwrites all other permissions. So, all members of the Mar-
keting group are restricted from accessing the files because the No Access right
was assigned to the Marketing user group.
C. Incorrect:
This method does not accomplish the desired effect. The Marketing
group has been assigned Read access to the folder share permissions, but this is
not sufficient to enable members of that group to access files on the file system.
For access to be granted to files accessed through a network share, a user must
have access to both the share and the underlying file system. In this scenario, add-
ing the Read right to the Marketing group within NTFS permissions accomplishes
the desired effect.
D. Correct:
This method accomplishes the desired effect. Members of the Marketing
group have access to the shared folder through their implicit membership in the
Everyone group. They have been explicitly assigned Read access to the folder at
the NTFS level. Finally, Todd’s access was removed by explicitly assigning Deny
Read access rights. Assigning the Deny Read access right overrides the Read
access that was granted to the Marketing group.