SharePoint 2013 Security and Permissions Flashcards

In SharePoint 2013, which permission level allows users to add, edit, and delete items in lists and libraries?

Answer: Contribute

The Contribute permission level allows users to view, add, update, and delete list items and documents.

What is the term used in SharePoint 2013 when a site, list, or item has different permissions than its parent?

Answer: Unique permissions

When the permission chain from a parent is broken, the object has 'unique permissions' specific to itself.

Which SharePoint 2013 built-in security group has Full Control over the entire site by default?

Answer: Site Owners

The Site Owners group is assigned the Full Control permission level by default, giving complete site management capabilities.

In SharePoint 2013, which default security group is assigned only the Read permission level?

Answer: Site Visitors

Site Visitors are assigned the Read permission level by default, allowing them only to view site content without making changes.

In SharePoint 2013, what does the 'Check Permissions' feature allow administrators to do?

Answer: View all permission levels a specific user has on a resource

The 'Check Permissions' feature allows administrators to see exactly which permission levels a specific user has on a particular site or item.

Which SharePoint 2013 permission type explicitly blocks access to a resource regardless of other permissions a user may have through group membership?

Answer: Deny permissions

Deny permissions explicitly block access to a resource and override any other access grants the user may have through group membership.

In SharePoint 2013, which permission level grants users the ability to view pages and download documents without any editing privileges?

Answer: Read

The Read permission level grants users view-only access to pages, list items, and documents without the ability to edit or delete content.

In SharePoint 2013, what is the primary purpose of the 'Limited Access' permission level?

Answer: Allowing access to a specific item when a user has no direct site-level access

Limited Access is automatically assigned by SharePoint when users are given access to a specific item within a site to which they otherwise have no access.

In SharePoint 2013, what happens to a subsite's permissions by default when the parent site's permissions are changed?

Answer: Subsite permissions are automatically updated to match the parent

By default, SharePoint sites inherit permissions from their parent site, so changes to parent permissions automatically propagate to child sites.

Which SharePoint 2013 administration feature allows setting permission policies for specific users across an entire web application, overriding all other permissions?

Answer: Web Application User Policy

The Web Application User Policy in Central Administration allows administrators to set permission policies that apply to specific users across the entire web application, overriding all site-level permissions.

Which SharePoint 2013 feature allows end users to request access to a site they cannot currently reach?

Answer: Access Request

The Access Request feature sends an email notification to site administrators when a user attempts to access a site without sufficient permissions.

In SharePoint 2013, which permission level includes the ability to edit and approve pages, list items, and documents for publishing?

Answer: Approve

The Approve permission level in SharePoint 2013 grants users the ability to edit and approve content for publication in addition to standard contribute rights.

In SharePoint 2013, which built-in permission level is the highest available?

Answer: Full Control

Full Control is the highest permission level in SharePoint 2013, granting complete access to all site functionality and settings.

What SharePoint 2013 feature allows site owners to grant users outside the organization access to collaborate on a site?

Answer: External sharing

SharePoint 2013's external sharing feature allows site owners to invite external users to collaborate, provided it is enabled at the web application and site collection level.

In SharePoint 2013, what is the purpose of Anonymous Access?

Answer: Enabling unauthenticated users to view public-facing content without logging in

Anonymous access in SharePoint 2013 allows unauthenticated users (without credentials) to view content on sites configured for public access.

Which SharePoint 2013 authentication provider uses Active Directory credentials to authenticate users?

Answer: Windows authentication

Windows authentication uses Active Directory credentials, making it the native and default authentication method for on-premises SharePoint in corporate environments.

In SharePoint 2013, which authentication method supports federated identity scenarios, allowing users from partner organizations with different identity providers to authenticate?

Answer: SAML token-based authentication

SAML token-based authentication in SharePoint 2013 supports federated identity scenarios, enabling users from trusted partner organizations with different identity providers to authenticate.

Which SharePoint 2013 feature requires documents to be reviewed and approved by designated users before they become visible to general site visitors?

Answer: Content Approval

Content Approval in SharePoint 2013 requires documents to be approved by authorized users before they become visible to all users who have read permission.

Which SharePoint 2013 feature records user actions such as viewing, editing, and deleting documents for security and compliance auditing?

Answer: Audit log

SharePoint 2013's Audit log records user actions including viewing, editing, deleting, and checking documents in/out, providing a trail for security and compliance reviews.

In SharePoint 2013 claims-based authentication, what is a 'claim'?

Answer: A statement about a user (such as identity, role, or attribute) passed by the identity provider

In claims-based authentication, a claim is a statement made by an identity provider about a user, such as their name, email, role, or group membership, which SharePoint uses for authorization decisions.