ACL ACL File System & OS Permissions 2 — Questions and Answers
Question 1: What is the difference between 'explicit' and 'inherited' NTFS permissions?
- Explicit apply to subfolders only; inherited apply to the current folder
- Explicit permissions are set directly on an object; inherited permissions flow down from a parent container (Correct answer)
- Explicit permissions can only be set by administrators; inherited can be set by any user
- Explicit permissions are temporary; inherited permissions are permanent
Correct answer: Explicit permissions are set directly on an object; inherited permissions flow down from a parent container
Explicit permissions are directly assigned to an object, while inherited permissions are automatically propagated from parent folders in the directory tree.
Question 2: In Linux extended ACLs, what does a 'default ACL' on a directory do?
- Removes all ACL entries from the directory
- Defines permissions applied to new files and subdirectories created within that directory (Correct answer)
- Sets a fallback permission when no ACL entry matches
- Restricts the file owner's permissions
Correct answer: Defines permissions applied to new files and subdirectories created within that directory
Default ACLs on directories specify the permission template automatically applied to newly created files and subdirectories within that directory.
Question 3: Which POSIX ACL entry type covers users who are not the file owner and do not match any named user or group entry?
- user
- group
- mask
- other (Correct answer)
Correct answer: other
The 'other' ACL entry type defines permissions for users who are neither the owner nor match any named user or group in the ACL.
Question 4: When NTFS 'Allow' and 'Deny' permissions conflict for the same user, which takes precedence?
- Allow always wins
- Deny always wins (Correct answer)
- The most recently set permission wins
- The administrator decides at login
Correct answer: Deny always wins
In NTFS, explicit Deny permissions always override Allow permissions to ensure restrictive security regardless of the order ACEs appear in the list.
Question 5: What does the Windows `icacls` command do?
- Lists installed certificates
- Displays and modifies NTFS access control lists on files and directories (Correct answer)
- Configures IP address ACLs on network interfaces
- Manages Internet Connection settings
Correct answer: Displays and modifies NTFS access control lists on files and directories
`icacls` is a Windows command-line tool used to view and modify NTFS discretionary access control lists on files and directories.
Question 6: What does the sticky bit do when set on a Linux directory?
- Prevents all users from writing to the directory
- Allows only the file owner or root to delete or rename files within the directory (Correct answer)
- Makes the directory contents invisible to non-owners
- Grants execute permission to all users
Correct answer: Allows only the file owner or root to delete or rename files within the directory
The sticky bit on a Linux directory ensures only the file owner or root can delete or rename files within it, even if others have write permission on the directory.
ACL ACL File System & OS Permissions 2
What is the difference between 'explicit' and 'inherited' NTFS permissions?