Question

Lab 3-Configuring Windows File System Permissions Lab Assessment

Questions 1. When setting permissions on an object to Full Control, what other permissions does this encompass?

Questions 2. Based on the permissions set on the assignment folders, which users (list their names) end up having only read and execute access?

Questions 3. In this lab, you assigned members of the Faculty Group Full Control of the Assignments folder. What risk does this pose?

Questions 4. What can you do to mitigate the risk posed by Full Control access?

Questions 5. When disabling inherited permissions on an object, what happens if you select 'Convert inherited permissions into explicit permissions on this object?

Questions 6. When disabling inherited permissions on an object, what happens if you select 'Remove all inherited permissions from this object'?

Answer 1

solution;

Answer 1)

Full Control encompass modify,read and execute,read, write, list and delete in case of folder.
Assigning full control on a object to a user means we are giving all the permissions except special permissions and the user is able to modify its own permissions for the files and folders.

Answer 3)

The main risk is that all the members of the Faculty Group can delete the files and folders under Assignments folder and also can modify the permissions of any files and folders under Assignments folder.

Answer 4)

To mitigate the risk posed by Full Control access, we can individually change the permission of the files and sub folders with deny in full control or deny the specific permission.

Answer 5)

When that is select, then all the inherited permissions are converted to explicit permissions, so after this the user can change the permission as their wish because now all the inherited permission are explicit permission.

Answer 6) If we select the above, then all the inherited permission will be deleted but the default permissions cannot be changed.