THIS METHOD DOES NOT ACCOMPLISH THE DESIRED EFFECT

5.

Correct Answers: D

A. Incorrect:

This method does not accomplish the desired effect. Although the

user Todd does not have explicit access to the folder, he has Change permissions

because of his implicit membership in the Everyone group. His effective privileges

are Read because of the restriction placed on the share.

B. Incorrect:

This method does not accomplish the desired effect. The No Access

permission always overwrites all other permissions. So, all members of the Mar-

keting group are restricted from accessing the files because the No Access right

was assigned to the Marketing user group.

C. Incorrect:

This method does not accomplish the desired effect. The Marketing

group has been assigned Read access to the folder share permissions, but this is

not sufficient to enable members of that group to access files on the file system.

For access to be granted to files accessed through a network share, a user must

have access to both the share and the underlying file system. In this scenario, add-

ing the Read right to the Marketing group within NTFS permissions accomplishes

the desired effect.

D. Correct:

This method accomplishes the desired effect. Members of the Marketing

group have access to the shared folder through their implicit membership in the

Everyone group. They have been explicitly assigned Read access to the folder at

the NTFS level. Finally, Todd’s access was removed by explicitly assigning Deny

Read access rights. Assigning the Deny Read access right overrides the Read

access that was granted to the Marketing group.