Practice question 56 of 180 · medium
The ProfileUsers group already has root Modify scoped to This folder only. The intended layout must give creators access to their own children and retain administrator recovery access. Which two ACL entries fit that layout?
Select all that apply. Every correct option and no extras are required for credit in the app.
Show the answer and explanation
✓ Correct answers
- Designated storage administrators: Full Control on this folder, subfolders and files
- CREATOR OWNER: Modify on subfolders and files only
Keep root creation rights distinct from child access. Creator-specific child permissions and designated administrative control satisfy the stated roles without broad recursive user access. Option explanations: A. Designated storage administrators: Full Control on this folder, subfolders and files: This retains intended operational access across the profile tree. B. CREATOR OWNER: Modify on subfolders and files only: The creator-specific inherited rights support access inside each new user's directory. C. ProfileUsers: Modify on all users' folders recursively: That would grant the whole group cross-profile access and defeat isolation. D. Everyone: Full Control on every container: It exposes profiles to unintended principals and defeats the stated isolation. Sources: Configure SMB Storage Permissions — https://learn.microsoft.com/en-us/fslogix/how-to-configure-storage-permissions
Read and review here, or open the app to practise and save your results on this device.
Unofficial study aid, not affiliated with or endorsed by Microsoft. Original educational practice questions, not official exam questions or a prediction of an exam result. Use Microsoft Learn and hands-on labs alongside this course.