ACL ACL File System & OS Permissions 2

Question 1

What is the difference between 'explicit' and 'inherited' NTFS permissions?

Accepted Answer

Explicit permissions are set directly on an object; inherited permissions flow down from a parent container

Answer

Explicit permissions are directly assigned to an object, while inherited permissions are automatically propagated from parent folders in the directory tree.

Question 2

In Linux extended ACLs, what does a 'default ACL' on a directory do?

Accepted Answer

Defines permissions applied to new files and subdirectories created within that directory

Answer

Default ACLs on directories specify the permission template automatically applied to newly created files and subdirectories within that directory.

Question 3

Which POSIX ACL entry type covers users who are not the file owner and do not match any named user or group entry?

Accepted Answer

other

Answer

The 'other' ACL entry type defines permissions for users who are neither the owner nor match any named user or group in the ACL.

Question 4

When NTFS 'Allow' and 'Deny' permissions conflict for the same user, which takes precedence?

Accepted Answer

Deny always wins

Answer

In NTFS, explicit Deny permissions always override Allow permissions to ensure restrictive security regardless of the order ACEs appear in the list.

Question 5

What does the Windows `icacls` command do?

Accepted Answer

Displays and modifies NTFS access control lists on files and directories

Answer

`icacls` is a Windows command-line tool used to view and modify NTFS discretionary access control lists on files and directories.

(ACL) Access Control Lists Practice Test

(ACL) Access Control Lists Practice Test

ACL ACL File System & OS Permissions 2