Microsoft Sharepoint 2013 SharePoint 2013 Security and Permissions — Questions and Answers
Question 1: In SharePoint 2013, which permission level allows users to add, edit, and delete items in lists and libraries?
- Read
- View Only
- Contribute (Correct answer)
- Design
Correct answer: Contribute
The Contribute permission level allows users to view, add, update, and delete list items and documents.
Question 2: What is the term used in SharePoint 2013 when a site, list, or item has different permissions than its parent?
- Permission elevation
- Unique permissions (Correct answer)
- Role inheritance
- Access override
Correct answer: Unique permissions
When the permission chain from a parent is broken, the object has 'unique permissions' specific to itself.
Question 3: Which SharePoint 2013 built-in security group has Full Control over the entire site by default?
- Site Members
- Site Visitors
- Site Owners (Correct answer)
- Farm Administrators
Correct answer: Site Owners
The Site Owners group is assigned the Full Control permission level by default, giving complete site management capabilities.
Question 4: In SharePoint 2013, which default security group is assigned only the Read permission level?
- Site Owners
- Site Members
- Site Visitors (Correct answer)
- Approvers
Correct answer: Site Visitors
Site Visitors are assigned the Read permission level by default, allowing them only to view site content without making changes.
Question 5: In SharePoint 2013, what does the 'Check Permissions' feature allow administrators to do?
- Reset a user's password
- View all permission levels a specific user has on a resource (Correct answer)
- Audit all recent permission changes
- Compare two users' access rights
Correct answer: View all permission levels a specific user has on a resource
The 'Check Permissions' feature allows administrators to see exactly which permission levels a specific user has on a particular site or item.
Question 6: Which SharePoint 2013 permission type explicitly blocks access to a resource regardless of other permissions a user may have through group membership?
- Limited Access
- View Only
- Deny permissions (Correct answer)
- Restricted Read
Correct answer: Deny permissions
Deny permissions explicitly block access to a resource and override any other access grants the user may have through group membership.
Question 7: In SharePoint 2013, which permission level grants users the ability to view pages and download documents without any editing privileges?
- Contribute
- Edit
- Read (Correct answer)
- Limited Access
Correct answer: Read
The Read permission level grants users view-only access to pages, list items, and documents without the ability to edit or delete content.
Question 8: In SharePoint 2013, what is the primary purpose of the 'Limited Access' permission level?
- Providing read-only access to specific documents
- Allowing access to a specific item when a user has no direct site-level access (Correct answer)
- Restricting administrators from full site control
- Granting temporary access to external users
Correct answer: Allowing access to a specific item when a user has no direct site-level access
Limited Access is automatically assigned by SharePoint when users are given access to a specific item within a site to which they otherwise have no access.
Question 9: In SharePoint 2013, what happens to a subsite's permissions by default when the parent site's permissions are changed?
- Subsite permissions are unaffected
- Subsite permissions are automatically updated to match the parent (Correct answer)
- Subsite permissions require manual updates
- Subsite permissions are deleted
Correct answer: Subsite permissions are automatically updated to match the parent
By default, SharePoint sites inherit permissions from their parent site, so changes to parent permissions automatically propagate to child sites.
Question 10: Which SharePoint 2013 administration feature allows setting permission policies for specific users across an entire web application, overriding all other permissions?
- Site Collection Administration
- Web Application User Policy (Correct answer)
- Central Administration Permission Manager
- Farm-level security policy
Correct answer: Web Application User Policy
The Web Application User Policy in Central Administration allows administrators to set permission policies that apply to specific users across the entire web application, overriding all site-level permissions.
Question 11: Which SharePoint 2013 feature allows end users to request access to a site they cannot currently reach?
- Permission elevation
- Access Request (Correct answer)
- Self-service site creation
- User invitation
Correct answer: Access Request
The Access Request feature sends an email notification to site administrators when a user attempts to access a site without sufficient permissions.
Question 12: In SharePoint 2013, which permission level includes the ability to edit and approve pages, list items, and documents for publishing?
- Contribute
- Edit
- Approve (Correct answer)
- Design
Correct answer: Approve
The Approve permission level in SharePoint 2013 grants users the ability to edit and approve content for publication in addition to standard contribute rights.
Question 13: In SharePoint 2013, which built-in permission level is the highest available?
- Design
- Manage Hierarchy
- Full Control (Correct answer)
- Site Collection Administrator
Correct answer: Full Control
Full Control is the highest permission level in SharePoint 2013, granting complete access to all site functionality and settings.
Question 14: What SharePoint 2013 feature allows site owners to grant users outside the organization access to collaborate on a site?
- External sharing (Correct answer)
- Anonymous access
- Guest access tokens
- Federated browsing
Correct answer: External sharing
SharePoint 2013's external sharing feature allows site owners to invite external users to collaborate, provided it is enabled at the web application and site collection level.
Question 15: In SharePoint 2013, what is the purpose of Anonymous Access?
- Allowing only specific unnamed users to access content
- Enabling unauthenticated users to view public-facing content without logging in (Correct answer)
- Preventing any user from accessing certain pages
- Masking user identities from audit logs
Correct answer: Enabling unauthenticated users to view public-facing content without logging in
Anonymous access in SharePoint 2013 allows unauthenticated users (without credentials) to view content on sites configured for public access.
Question 16: Which SharePoint 2013 authentication provider uses Active Directory credentials to authenticate users?
- Forms-based authentication
- SAML token-based authentication
- Windows authentication (Correct answer)
- Basic authentication
Correct answer: Windows authentication
Windows authentication uses Active Directory credentials, making it the native and default authentication method for on-premises SharePoint in corporate environments.
Question 17: In SharePoint 2013, which authentication method supports federated identity scenarios, allowing users from partner organizations with different identity providers to authenticate?
- Windows authentication
- Basic authentication
- SAML token-based authentication (Correct answer)
- Certificate authentication
Correct answer: SAML token-based authentication
SAML token-based authentication in SharePoint 2013 supports federated identity scenarios, enabling users from trusted partner organizations with different identity providers to authenticate.
Question 18: Which SharePoint 2013 feature requires documents to be reviewed and approved by designated users before they become visible to general site visitors?
- Version control
- Content Approval (Correct answer)
- Document rating
- Workflow notification
Correct answer: Content Approval
Content Approval in SharePoint 2013 requires documents to be approved by authorized users before they become visible to all users who have read permission.
Question 19: Which SharePoint 2013 feature records user actions such as viewing, editing, and deleting documents for security and compliance auditing?
- Version history
- Event log
- Audit log (Correct answer)
- Change tracking
Correct answer: Audit log
SharePoint 2013's Audit log records user actions including viewing, editing, deleting, and checking documents in/out, providing a trail for security and compliance reviews.
Question 20: In SharePoint 2013 claims-based authentication, what is a 'claim'?
- A request for elevated permissions submitted by a user
- A statement about a user (such as identity, role, or attribute) passed by the identity provider (Correct answer)
- A security alert triggered by unauthorized access attempts
- A token granting temporary administrative rights
Correct answer: A statement about a user (such as identity, role, or attribute) passed by the identity provider
In claims-based authentication, a claim is a statement made by an identity provider about a user, such as their name, email, role, or group membership, which SharePoint uses for authorization decisions.
Question 21: In SharePoint 2013, how can a site collection administrator restrict access to sensitive documents within a library while still allowing users general access to the site?
- Apply unique permissions to the specific library or items (Correct answer)
- Remove the user from all SharePoint groups
- Create a separate permission level for sensitive content
- Enable Anonymous Access on the parent site
Correct answer: Apply unique permissions to the specific library or items
By setting unique permissions on a specific library or individual items (breaking permission inheritance), administrators can restrict access to sensitive content while users retain access to the broader site.
