You are desktop support technician for a company whose network is configured as an Active Directory domain. All users in the domain belong to groups that correspond to departments. Walter, a member of the Accounting group, shares a folder named Finance on his Windows XP Professional computer. Other members of Accounting require read and write access to the files in Finance. Members of the Managers group should have only read access to the files. Only administrators should be able to assign share and NTFS permissions. Which of the following permissions should you assign? (Select all that apply.)


1) Grant the Allow - Change permission to the Domain Users group for the share.

2) Grant the Allow - Read permission to the Domain Users group for the share.

3)Grant the Allow - Full Control permission to the Accounting group for the share.

4) Grant the Allow - Modify permission to the Accounting group for Finance, and grant the Allow - Read & Execute permission to the Managers group for Finance.

5) Grant the Allow - Full Control permission to the Accounting group for Finance, and grant the Allow - Read & Execute permission to the Managers group for Finance.

answer 4.

full control will allow the accounting group to change permissions so it aint 5.

Modify will allow them read/write access to the share, and read and execute is just for the management.

Edit:

Just googled it as I wasnt 100% sure. but yeah its modify you need to set.

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/acl_folder_permissions.mspx

Well the correct answer is 1 and 4.

Is that a typo in the question then? Should it be Domain Admins instead of Domain Users?

The only change option in sharing and security (adcanced) is change permissions, so how is giving that to all domain users a good idea?

Well wouldnt domain admins have that ability by default?

Dont see why youd need to set option 1, and you certainly wouldnt want to set it for all users on the domain.