ACL File System & OS Permissions Flashcards
6 cards from real ACL practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 ACL File System & OS Permissions flashcards as text
What is the difference between 'explicit' and 'inherited' NTFS permissions?
Answer: Explicit permissions are set directly on an object; inherited permissions flow down from a parent container
Explicit permissions are directly assigned to an object, while inherited permissions are automatically propagated from parent folders in the directory tree.
In Linux extended ACLs, what does a 'default ACL' on a directory do?
Answer: Defines permissions applied to new files and subdirectories created within that directory
Default ACLs on directories specify the permission template automatically applied to newly created files and subdirectories within that directory.
Which POSIX ACL entry type covers users who are not the file owner and do not match any named user or group entry?
Answer: other
The 'other' ACL entry type defines permissions for users who are neither the owner nor match any named user or group in the ACL.
When NTFS 'Allow' and 'Deny' permissions conflict for the same user, which takes precedence?
Answer: Deny always wins
In NTFS, explicit Deny permissions always override Allow permissions to ensure restrictive security regardless of the order ACEs appear in the list.
What does the Windows `icacls` command do?
Answer: Displays and modifies NTFS access control lists on files and directories
`icacls` is a Windows command-line tool used to view and modify NTFS discretionary access control lists on files and directories.
What does the sticky bit do when set on a Linux directory?
Answer: Allows only the file owner or root to delete or rename files within the directory
The sticky bit on a Linux directory ensures only the file owner or root can delete or rename files within it, even if others have write permission on the directory.