Title: Lesson 14: Quiz
Course: RITA MC - ITNW 1308 > Section: Lesson 14: Configuring File and Folder Access

Q: An access control list (ACL) is a collection of individual permissions, which are called what?
- Access control list objects
- Access control entries
- Discretionary access control security
- Permissions descriptions
A: Access control entries
Feedback: An ACL is a collection of individual permissions, in the form of access control entries (ACEs). Each ACE consists of a security principal (that is, the name of the user, group, or computer being granted the permissions) and the specific permissions assigned to that security principal. When you manage permissions in any of the Windows 8.1 permission systems, you are actually creating and modifying the ACEs in an ACL.

Q: How many basic and advanced permissions does NTFS provide for assignment to a folder or file?
- 24 basic, 6 advanced
- 6 basic, 4 advanced
- 16 basic, 24 advanced
- 6 basic, 14 advanced
A: 6 basic, 14 advanced
Feedback: The NTFS permission system has 14 advanced permissions that you can assign to a folder or file. However, there are also six basic permissions, which are various combinations of the 14 advanced permissions.

Q: Regarding NTFS permissions, when you copy NTFS files or folders from one volume to another, which of the following statements is true?
- The permissions are retained if the source and destination are on the same NTFS volume.
- The permissions are not retained, but are instead set to the default at the root of the volume being copied to.
- The permissions are retained even if the source and destination are on different NTFS volumes.
- The permissions are not retained and permissions set at destination are applied.
A: The permissions are not retained and permissions set at destination are applied.
Feedback: When you copy NTFS files or folders from one location to another, whether the destination is on the same or a different NTFS volume, the new copy does not take with it the permissions from its original location. Instead, the new copy inherits permissions from its parent folder at the new location. This behavior can be overridden, however, through the usage of certain flags with the RoboCopy utility.

Q: Regarding NTFS permissions, when you move NTFS files or folders from one volume to another, which of the following statements is true?
- The permissions are retained if the source and destination are on the same NTFS volume.
- The permissions are not retained, but are instead set to the default at the root of the volume being copied to.
- The permissions are retained even if the source and destination are on different NTFS volumes.
- The permissions are not retained and permissions set at destination are applied.
A: The permissions are retained if the source and destination are on the same NTFS volume.
Feedback: If you move files or folders to a new location on the same NTFS volume, their existing permissions move with them. If you move files or folders to a different volume, they leave their existing permissions behind and inherit permissions from the parent folder at the new location.

Q: When examining effective access, there are three rules that must be understood. Which of the following is not one of these rules?
- Implicit permissions break permissions inheritance.
- Allow permissions are cumulative.
- Explicit permissions take precedence over inherited permissions.
- Deny permissions override Allow permissions.
A: Implicit permissions break permissions inheritance.
Feedback: Effective access is the combination of Allow permissions and Deny permissions that a security principal receives for a given system element, whether explicitly assigned, inherited, or received through a group membership. Because a security principal can receive permissions from so many sources, it is not unusual for those permissions to conflict, so there are rules defining how the permissions combine to form the effective permissions. These rules are as follows: - Allow permissions are cumulative. - Explicit permissions take precedence over inherited permissions. - Deny permissions override Allow permissions.

Q: When using the iacls.exe utility, what flag (e.g., /?) is used to specify that the command should be executed on all files and subfolders contained in the starting folder location?
- /Q
- /C
- /L
- /T
A: /T
Feedback: The /T flag specifies that the command should be executed on all files and subfolders contained in the starting folder location.

Q: What is the maximum support file name length in the NTFS file system?
- 63 characters
- 512 characters
- 255 characters
- 1023 characters
A: 255 characters
Feedback: NTFS supports long file names (up to 255 characters).

Q: To use EFS on a file or folder, which of the following conditions must you first meet? (Choose all that apply.)
- You must be using an NTFS volume.
- You must not be using a storage pool.
- You must decompress the file or folder first.
- You must be in an Active Directory domain.
A: You must be using an NTFS volume.; You must decompress the file or folder first.
Feedback: To use EFS, you must store your files on an NTFS volume. If you are using Windows compression on the file/folder, you have to decompress it before you can encrypt it.

Q: If you apply a change to a folder to enable EFS for the folder only, what happens to the files currently in the folder?
- The files in the root of the folder are encrypted, but not the files in any child folders.
- The files currently in the folder are not encrypted.
- The files in all child folders are encrypted, but not the files in the root folder.
- No files are encrypted, only the folder.
A: The files currently in the folder are not encrypted.
Feedback: If you elect to apply changes to the selected folder only, EFS does not encrypt any of the files that are currently in the folder. However, any files that you create, copy, or move to the folder after you enable EFS will be encrypted.

Q: What do NTFS quotas provide an administrator?
- The ability to limit the number of files stored by users on the volume.
- The ability to prevent users from creating new folders on the volume.
- The ability to limit the quantity of storage space utilized by users on the volume.
- The ability to prevent users from granting access to their data stored on the volume.
A: The ability to limit the quantity of storage space utilized by users on the volume.
Feedback: NTFS quotas enable administrators to set a storage limit for users of a particular volume. Depending on how you configure the quota, users exceeding the limit can be denied disk space, or just receive a warning. The space consumed by individual users is measured by the size of the files they own or create.

Q: When deciding what your auditing policy should be, there are some key things to consider to help you decide which computers, resources, and events you want to audit. Which of the items listed is not one of the items typically considered?
- Allow users of computers the ability to manage the logs on those computers.
- Audit only pertinent items.
- Configure the size of your security logs carefully.
- Archive security logs to provide a documented history.
A: Allow users of computers the ability to manage the logs on those computers.
Feedback: You would not typically want to allow users of systems to manage the logs coming from those systems. The other listed items are very valid considerations that you should think about when planning your audit strategy.

Q: What two basic steps must be performed to fully configure auditing for file or folder access?
- Create and configure an audit policy.
- Assign users to perform audits to the local Administrators group.
- Enable auditing on the files or folders.
- Join the computers to be audited to an Active Directory domain.
A: Create and configure an audit policy.; Enable auditing on the files or folders.
Feedback: Implementation of your plan requires that you specify the categories to be audited (using group policy) and, if necessary, configure objects for auditing (via Windows Explorer for files and folders).

Q: Which NTFS permission should you configure for a security group when you want members of the group to be able to see files contained in a folder but not to open the files contained in the folder?
- Read
- Read & Execute
- List Folder Contents
- Modify
A: List Folder Contents
Feedback: List Folder Contents enables user/group to view a list of files in the selected folder; user is not allowed to read the contents of a file or execute a file.

Q: Which NTFS permission should you configure for a security group when you want members of the group to be able to create new files but not make changes to existing files?
- Create Folders/Append Data
- Full Control
- Read & Execute
- Write
A: Write
Feedback: The Write permission enables a user/group to create files and folders, however it is going to need to be paired up with Read or Read Execute.

Q: Which NTFS permission should you configure for a security group when you want members of the group to be able to edit existing files but not create new files?
- Create Folders/Append Data
- Write Attributes
- Delete Subfolders and Files
- Take Ownership
A: Create Folders/Append Data
Feedback: The Append Data permission allows or denies security principals the ability to add data to the end of the file but not to modify, delete, or overwrite existing data in the file. This permission applies to files only.