Free MCSE Braindumps, the best braindumps site for certification exams like 070-290, 070-270 and more!

QUESTION 30
You are the helpdesk technician for Alecnet .s co m's accounting department.
A new company IT Security policy states that all client computers must be installed
with Windows 2000 Professional or later. You decide to upgrade you computer first
to reveal any possible problems. Your computer has a CD-ROM drive attached to a
SCSI adapter that is not included on the current Hardware Compatibility List
(HCL) and that the original SCSI drivers that you used for Windows NT are not
compatible with Windows 2000 Professional.
You want to upgrade your computer to Windows 2000 Professional.
What should you do?
A. Replace the SCSI adapter card with a Windows 2000 Professional compatible SCSI
adapter.
Start the installation from the Windows 2000 Professional CD-ROM.
Add the new adapter card drivers when you are prompted.
B. Obtain Windows 2000 drivers from the SCSI adapter manufacturer.
Copy the drivers to C:\Winnt folder.
Start the installation from the Windows 2000 Professional CD-ROM.
C. Obtain Windows 2000 drivers from the SCSI adapter manufacturer.
Start the installation by using the Windows 2000 Professional CD-ROM.
Add the new adapter card drivers when you are prompted.
D. Modify Config.sys to use your existing SCSI adapter and existing CD-ROM drive.
Using Windows NT 4.0, start the installation by running Winnt32.exe from the I386

folder on the Windows 2000 Professional CD-ROM.
Answer: A
Explanation: The hardware compatibility list (HCL) is a list of computers and
peripherals that have been tested and have passed compatibility testing with the product
for which the HCL is being developed. For example, the Windows 2000 HCL lists the
products that have been tested and found to be compatible with Windows 2000. Before
upgrading to Windows 2000, you should ensure that the computer hardware meets the
minimum Windows 2000 hardware requirements. You must also check the Hardware
Compatibility List or test the computers for hardware compatibility using the Windows
2000 Compatibility tool. Since the question mentions that the SCSI adapter is not
included on the current HCL and that the original SCSI drivers, used for Windows NT is
not compatible with Windows 2000, you should get a Windows 2000 Professional
compatible SCSI adapter, start the installation of the Windows 2000 Professional
CD-ROM and then add the new adapter card when prompted to do so.
Incorrect Answers:
B: When purchasing a new SCSI adapter card, you will obviously get the drivers for it as
well. Since the problem stems from an originally incompatible SCSI driver, you need to
get a new, compatible SCSI adapter card that will allow the upgrade to Windows 2000
Professional.
C: Windows 2000 drivers will not be obtainable from the SCSI adapter manufacturer,
and besides, you will already have the Windows 2000 Professional CD-ROM.
D: There is no need to modify the Config.sys to use the existing SCSI adapter since the
adapter is not Windows 2000 compatible.
Reference:
Rick Wallace, Self-Paced MCSE Training Kit (Exam 70-210)-Microsoft Windows 2000
Professional, Microsoft Press, Redmond, 2000, Chapter 23, Lesson 4
QUESTION 31
You are upgrading 2 of the helpdesk computers from Windows NT Workstation 4.0
to Windows 2000 Professional. The upgrade of computer 1 is successful. However,
during the upgrade of computer 2, a series of power outages and the upgrade of
computer 2 is incomplete.
Furthermore, you find that computer 2 can no longer boot Windows NT
workstation 4.0 and it does not support booting from the Windows 2000
Professional CD-ROM. You want to recover the failed upgrade with the help of
computer 1.
What should you do?
A. On computer1, copy the CD-ROM driver and system files named ntdetect,
ntbootdd.sys, Ntdll.dll and Setupldr.bin to a formatted floppy disk. On computer2, restart
the computer by using the floppy disk. Then run WinNT32/debug from the Windows
2000 Professional CD-ROM.
B. From computer1, copy the CD-ROM driver and system files named Ntdetect,
Ntbootdd.sys, Ntdll.dll, and Setupldr.bin to a formatted floppy disk. On the computer2,

restart the upgrade by using the floppy disk. Then run WinNT32/rx from the Windows
2000 Professional CD-ROM.
C. On the computer1, run Makebt32.exe from the Bootdisk folder on the Windows 2000
Professional CD-ROM. On computer2, restart the upgrade by using the newly created
floppy disks.
D. On computer1, perform a remote installation from a network share. On computer2,
when the text portion of setup has completed, resume the installation by using the Setup
Manager.
Answer: C
Explanation: You can create the four setup boot disks by using either makeboot.exe
or makebt32.exe. Both are located in the \Bootdisk directory on the Windows 2000
installation CD. These disks can be used to restart the installation process on
computer2.
Incorrect answers:
A: Winnt32 is a 32-bit application and can only be used from inside a Windows
environment and not after starting the computer by means of a boot diskette. A computer
can only be booted into DOS mode from a boot disk, and DOS mode cannot use 32-bit
applications.
B: Winnt32 is a 32-bit application and can only be used from inside a Windows
environment and not after starting the computer by means of a boot diskette. A computer
can only be booted into DOS mode from a boot disk, and DOS mode cannot use 32-bit
applications.
D: The text portion of the setup on computer2 will not be completed. To use a network
installation on computer2, computer2 must be booted with a network boot disk.
Reference:
Rick Wallace, Self-Paced MCSE Training Kit (Exam 70-210)-Microsoft Windows 2000
Professional, Microsoft Press, Redmond, 2000, Chapter 2, Lesson 4
QUESTION 32
You are the helpdesk technician for Alecnet 'ss research department. The
research department has received 30 new computer and you need to install
Windows 2000
Professional on them. To save some time you also want to simultaneously deploy a
Windows 2000 Professional service pack during the installation.
You start by creating a network distribution folder named InstallFiles and copy the
i386 folder from the Windows 2000 Professional CD to the InstallFiles folder.
What should you do next?
A. Copy the service pack files to the InstallFiles\Misc folder.
B. Copy the service pack files to the InstallFiles\$OEM$ folder.
C. From an existing client computer, run the Update -u command from the service pack
to the InstallFiles folder.
D. From an existing client computer, run the Update -s:InstallFiles command from the
service pack to the InstallFiles folder.

Answer: D
Explanation: Service pack slipstreaming refers to a service pack being integrated
with an updated version of Windows 2000 on a CD-ROM or on a network share.
When Windows 2000 is installed from either source, the appropriate files from the
service pack are installed without having to manually apply the service pack after
the installation. To apply a new service pack, run Update.exe with the
-s:distribution_folder switch, where distribution_folder is the name of the folder
that contains the Windows 2000 installation files.
Note: In some material, Microsoft refers to update /slip. This is incorrect, update -s is
used.
Incorrect answers:
A: You cannot apply a service pack by simply copying the files to a folder named Misc.
B: You cannot apply service simply by copying the files to a folder named $OEM$. The
$OEM$ folder is used to provide supplemental files to be copied to target computer
during setup. These files include drivers, utilities, applications, and any other files
required to deploy Windows 2000 Server within an organization. The $OEM$ folder
must be located inside the distribution share.
C: You use update-s, not update-u to perform service pack slipstreaming. This solution
thus does not use the correct switch.
Reference:
Rick Wallace, Self-Paced MCSE Training Kit (Exam 70-210)-Microsoft Windows 2000
Professional, Microsoft Press, Redmond, 2000, Chapter 23, Lesson 5
QUESTION 33
You are the senior helpdesk technician for Alecnet .s T o aid you and the other
technicians during operating system installations you have copied the contents of
the Windows 2000 Professional CD to a shared network folder named
\\Server1\Win2000p. The shared folder is used to perform over-the-network
installations of Windows 2000 Professional on all new computers purchased by
Alecnet .s
You receive a Windows 2000 Service Pack CD by mail and apply the Service Pack
to Server1 and to the \\Server1\Win2000p folder.
You start getting reports from the other technicians that there are several files in
the Service Pack that are incompatible with some of the new computers.
You want to make sure that the Service Pack files are not installed on any new
computers until the problem has been corrected. What can you do?
A. Use Update.exe from the Service Pack CD on server1.
B. Select the Uninstall option.
C. Copy the contents of the Windows 2000 Professional CD to \\Server1\Win2000p
again, allowing the operating system to overwrite newer files while copying.
D. Run \\Server1\Win2000p\WinNT32.exe/u on the new computer.
E. Run Update.exe/s:\\Server1\Win2000p/u from the Service Pack CD on Server1.
Answer: B

Explanation: The service pack that has been applied, or slipstreamed, to the
installation files and cannot be unapplied. You thus have to replace the installation
files in the network share with the original Windows 2000 installation files.
Incorrect answers:
A: The update.exe utility does not have an uninstall option.
C: The winnt32 /u command performs an unattended installation of Windows 2000. It
does not remove the service pack from the installation files.
D: The Update.exe /s command applies the service pack to the Windows 2000
installation files - it slipstreams the service pack. This has already been done, and you
want to make this undone.
Reference:
Rick Wallace, Self-Paced MCSE Training Kit (Exam 70-210)-Microsoft Windows 2000
Professional, Microsoft Press, Redmond, 2000, Chapter 23, Lesson 5
QUESTION 34
You are the administrator of Alecnet .sc om's network. The accounting
department has asked you to help them with installing a Windows 2000
Professional service pack to the 10 computers in their organizational unit.
You create a Windows 2000 installer package file for the service pack and you test
the package by successfully installing the service pack to some other computers in
the domain. You assign the package file to the Accounting organizational unit. After
the installation, you notice that the service pack was not installed on any of the 10
computers.
You want to ensure that the service pack is successfully installed on the computers
in the Development organizational unit. What should you do?
A. Use Computer Management to start the Windows installer service on all the
computers in the Development organizational unit
B. Use the local administrator account to log on to the computers in the Development
organizational unit. Then redeploy the service pack to the computers in the Development
organizational unit.
C. Run Windows Installer to repair the package file. Then redeploy the service pack to
the computers in the Development organizational unit.
D. Add the user accounts from the Development organizational unit to a DACL. Grant
the user accounts read permission to the service pack deployment directory.
Answer: D
Explanation: Before users can access resources on Windows 2000, they must be
assigned the appropriate permissions to those resources. In this scenario the users
from the Development OU need to be assigned read permission to the deployment
directory, which is an object, to be able to start the installation process. Objects,
such as the deployment directory, use a DACL (discretionary access control list) to
check whether users or groups have been allowed or denied permissions to the
object that they are attempting to access. Therefore, the user accounts of the

Development OU must be added to the DACL of the deployment folder.
Incorrect answers:
A: This is not the most likely problem. The most likely problem is that the user accounts
do not have appropriate permissions on the service pack deployment directory.
B: Assigned software does not need to be installed with any special user account. There is
thus no need to log on with the local administrator account.
C: As the package was installed successfully on other computers in the domain, the
problem does not lie with the installation package. Instead it lies with the Development
OU's lack of the appropriate permissions to access the deployment directory.
Reference:
Rick Wallace, Self-Paced MCSE Training Kit (Exam 70-210)-Microsoft Windows 2000
Professional, Microsoft Press, Redmond, 2000, Chapter 23, Lesson 5
QUESTION 35
You have been assigned the task to upgrade 100 computers with identical hardware
from Windows 98 to Windows 2000 Professional. You create an unattended.txt file
using the setup manager wizard.
You upgrade 10 of the computers and notice that the monitors on the 10 computers
go blank after Windows 2000 Professional loads. You start the troubleshooting
process by restarting one of the computers in Safe Mode, and find out that there
does not seem to be any problems with the monitors. Which change should you
make to unattend.txt to configure your video settings correctly?
Click the appropriate line on the Unattend.txt Notepad screen.

Answer:
Explanation: Click on the Vrefresh=150
The video adapter's refresh rate defines the number of times that the screen must be
rewritten per second. The higher the resolution; the larger the number of dots that have to
be written within every refresh cycle. Video adapters and monitors have a default refresh
rate of 60 Hz. This is the setting guaranteed to work on most modern video adapters and
monitors, even with the standard video adapter driver installed. Not all video adapters
and monitors support a refresh rate of above 80 Hz. When the refresh rate is not
supported, the monitor goes blank or the image becomes distorted.
Reference:
Rick Wallace, Self-Paced MCSE Training Kit (Exam 70-210)-Microsoft Windows 2000
Professional, Microsoft Press, Redmond, 2000, Chapter 2, Lesson 4
QUESTION 36
Your Windows 2000 Professional computer contains a single hard disk configured
as a single partition. You are cleaning up on the hard disk and wish to move a folder
named Sales into a folder named Corp on your computer. The sales folder is a
compressed folder with older sales reports.

You want the files in the Sales folder to remain compressed after moving the folder
but you do not want any of the files in the Corp folder to be compressed. You want
to ensure that the files are recoverable in case of any disk problems. You also want
to move the files with the least amount of administrative effort.
What should you do?
A. Copy the Sales folder to the Corp folder. Do nothing further.
B. Backup the Sales folder. Move the Sales folder to the Corp folder.
C. Compress the Corp folder. Then copy the Sales folder to the Corp folder.
D. Move the Sales folder to a second computer. Then move the Sales folder to the Corp
folder.
Answer: B
Explanation: The contents of the Sales folder should be backed up so that files
would be recoverable in case of disk problems. You could move the Sales folder to
the CORP folder, as the files will remain compressed since the folder is moved
within a single partition. The general rules on copying and moving compressed files
and folder are: files and folders copied within a NTFS volume and between NTFS
volumes inherit the compression state of the target folder; files and folders moved
between NTFS columes inherit the compression state if the target folder; and files
and folders moved within an NTFS volume retain the original compression state of
the file or folder.
Incorrect Answers:
A: A folder copied within an NTFS partition will inherit the compression state of the
target folder. This will result in the Sales folder inheriting the uncompressed state of the
CORP folder since the target folder is uncompressed. Furthermore, you are also required
to ensure that the folder contents are recoverable in the event of a system failure. This
solution does not make provision for the recovery of the folder.
C: A folder copied within an NTFS partition will inherit the compression state of the
target folder. This will result in the Sales folder losing its compressed state since the target
folder is uncompressed. Compressing the CORP folder is also not a viable solution, as the
scenario explicitly requires you to retain the uncompressed state of the files in the CORP
folder. Furthermore, you are also required to ensure that the folder contents are
recoverable in the event of a system failure. This solution does not make provision for the
recovery of the folder.
D: Files and folders that are moved between NTFS partitions inherit the compression
state of the target folder. Therefore the Sales folder might lose its compression state.
Furthermore, moving the Sales folder twice is unnecessary as this will not ensure
recoverability of the files in the Sales folder.
Reference:
Rick Wallace, Self-Paced MCSE Training Kit (Exam 70-210)-Microsoft Windows 2000
Professional, Microsoft Press, Redmond, 2000, Chapter 18, Lesson 1
QUESTION 37
On your Windows 2000 Professional computer you have a folder containing a 1MB

compressed bitmap file with an original size of 2MB. You need copy the file from
you computer to a portable Windows 2000 Professional computer without network
connection. When you try to copy the file to a 1.4-MB floppy disk you receive the
following error message: 'Destination drive is Full'.
What should to do?
A. Move, rather than copy, the compressed bitmap file to the floppy disk.
B. Reformat the floppy disk.
Then copy the compressed bitmap file to the floppy disk.
C. Use another program to compress the bitmap file before copying it to the floppy disk.
D. Copy an empty compressed folder to the floppy disk.
Then copy the compressed bitmap file to the folder on the floppy disk.
Answer: C.
Explanation: Windows 2000 file compression only works on the NTFS file system.
However, floppy disks make use of the FAT file system. When compressed files are
copied from an NTFS drive to a FAT or FAT32 drive, the file loses it compressed
state and becomes uncompressed. You therefore require another application to
compress the bitmap file. You could for example use Winzip, WinRar, WinAce or
Micosoft's compress.exe.
Incorrect answers:
A: Windows 2000 file compression only works on the NTFS file system. However,
floppy disks make use of the FAT file system. When compressed files are moved from an
NTFS drive to a FAT or FAT32 drive, the file loses it compressed state and becomes
uncompressed. In which case, the file would be too big to fit on the floppy disk.
B: Floppy disks can only be formatted with the FAT file system. It cannot be formatted
with the NTFS file system. Windows 2000 file compression only works on the NTFS file
system. However, floppy disks make use of the FAT file system. When compressed files
are moved from an NTFS drive to a FAT or FAT32 drive, the file loses it compressed
state and becomes uncompressed, in which case the file would be too big to fit on the
floppy disk.
D: When compressed folders are moved from an NTFS drive to a FAT or FAT32 drive,
the folder loses it compressed state and becomes uncompressed. When a compressed file
is then moved to the folder it too becomes uncompressed, in which case the file would be
too big to fit on the floppy disk.
Reference:
Rick Wallace, Self-Paced MCSE Training Kit (Exam 70-210)-Microsoft Windows 2000
Professional, Microsoft Press, Redmond, 2000, Chapter 18, Lesson 1
QUESTION 38
You are the network administrator for Alecnet .s
Your Windows 2000 Professional computer is configured with a single hard drive
that contains a single partition. You want to move a folder named Sales under a
folder named Corp on your computer.
The files in the Sales folder are compressed and you wish that they remain in

compressed state even after you have moved them. You want the files in the Corp
folder to be compressed as well. You want the Sales folder to also reside in its
original location in case of any problems while moving it. You also want to move the
files with the least amount of administrative effort.
What should you do?
To answer, select the appropriate action and drag the action to the appropriate
folder and put the actions in the proper order.
Answer:
Explanation:
When you copy files or folders to FAT volumes, the folders and files lose their NTFS
permissions because FAT volumes don't support NTFS permissions.
When you move a file or folder within a single NTFS volume then the file or folder
retains the original permissions. You must have the Write permission for the destination
folder to move files and folders into it. You must have the Modify permission for the
source file or folder. The Modify permission is required to move a file or folder because
Windows 2000 deletes the file or folder from the source folder after it is copied to the
destination folder. Also the owner of the file or folder does not change.
Reference:
Rick Wallace, Self-Paced MCSE Training Kit (Exam 70-210)-Microsoft Windows 2000

Professional, Microsoft Press, Redmond, 2000, Chapter 14, Lesson 5 & Chapter 18,
Lesson 1
QUESTION 39
You are the administrator of a Windows 2000 network. The accounting and legal
departments needs to share some documents. The secured files needs to be shared
from network shares on a Windows 2000 Professional computer.
You want to accomplish the following goals:
1. Users in both departments have to be able to access their own files.
2. Users in the accounting department have to be able to access the legal
departments documents.
3. Users in the legal department are not allowed to access accounting department
documents.
4. Users belonging to the managers group have to be able to access and modify
document belonging to both the accounting and the legal department.
You take the following actions:
1. Two shared folders are created and named Accounting and Legal
2. Three groups named Accounting, Legal, and Management are created
3. Allow the Accounting group modify permission on the Accounting folder
4. Allow the Legal group modify permission on the Legal folders.
5. Allow the Management group modify permission on both the Accounting and
Legal folders.
Which result or results do these actions produce? (Choose all that apply)
A. Users in both departments can access to their own files from the network.
B. Users in the accounting department can view the legal department's documents.
C. Users in the legal department cannot view the accounting department's documents.
D. Company managers can access and modify both departments' files.
Answer: A, C, D.
Explanation:
A: The Accounting group has Modify permission to the Accounting folder, and the Legal
department has Modify permission to the Legal folders, so both departments can access
their own files.
C: The Legal group has not been granted any permissions on the Accounting folder so
they cannot access the Accounting department's documents.
D: The Management group has Modify permissions to both the Accounting and the Legal
folders so they will be able to modify both departments' files.
Incorrect Answers
B: The Accounting group has been not been granted any permissions on the Legal
folders. They cannot view these folders.
Reference:
Rick Wallace, Self-Paced MCSE Training Kit (Exam 70-210)-Microsoft Windows 2000
Professional, Microsoft Press, Redmond, 2000, Chapter 14, Lesson 2

QUESTION 40
You are the administrator of your Alecnet 'ss network. Mark, an employee in the
sales department, is leaving the company and a new employee named Eric has been
hired to replace him.
Mark used a Windows 2000 Professional computer and logged on with a local user
account. Mark has rights to multiple files and folders on the computer.
Eric will need to have the same rights and permissions that Mark had. You also
want to ensure that Mark will no longer have access to the files and folders. You
want to accomplish this with least administrative effort.
What should you do?
A. Rename Mark's user account to Eric and change the account password.
B. Create Eric's account by copying Mark's profile to Eric's account. Delete Mark's
account.
C. Create Eric's account by copying Marks account. Delete Mark's account.
D. Delete Mark's account. Add Eric's account. Add Eric to the same groups to which
Mark belonged. Grant Eric to all the individual user rights and permissions that Mark
had.
Answer: A
Explanation: A user account and the permission and rights attached to them can
easily be transferred to another user by renaming the account and changing the
password. By renaming Mark's user account and by changing the password, Eric
will have the same rights and permissions as Mark had, and Mark will not be able
to use his old account. This provides the solution with least amount of
administrative effort.
Incorrect Answers:
B: Copying Mark's profile to Eric's account will not give Eric the permissions Mark had.
Instead Eric will have the same desktop settings.
C: Every user account has a unique Security Identifier (SID). When Mark's account is
copied the resulting account, Eric's account, will not have the same permissions.
D: This solution will meet the requirements of this scenario; however, it is not the
solution with the least administrative effort. Therefore this is not the best solution. The
best solution would be to rename Marks account and change the password. This would
provide Eric with the same rights and permission that Mark had and would not require us
to do any additional administrative work on Eric's account.
Reference:
Rick Wallace, Self-Paced MCSE Training Kit (Exam 70-210)-Microsoft Windows 2000
Professional, Microsoft Press, Redmond, 2000, Chapter 14, Lesson 2
QUESTION 41
Several users in the Sales department share a Windows 2000 Professional computer
and you have been assigned the task to administer the computer. All current users
have their own user accounts on the computer and can log in with their accounts.
You have recently added two new user account to accommodate two new users. You

name the accounts User7 and User8 on computer5. When User7 attempts to log on o
the computer, she receives the following error message: "Windows cannot copy file
C:\Documents and Settings\Default User\ to location C:\Documents and
Settings\User7. Contact your network administrator. Detail - Access is denied."
When User8 attempts to log on to the computer, he receives the same type of error
message.
You want to allow the two new users, as well as other users in the Sales department,
to be able to log on to the computer.
Which two methods can you use to accomplish your goal? (Choose two.)
A. Add the User7 and User8 user accounts to the DACL for the Profiles shared folder on
the network server.
B. Add the User7 and User8 user accounts to the DACL for the C:\Documents and
Settings\Default User folder.
C. Add the Everyone group to the DACL for the C:\Documents and Settings\Default
User folder.
D. Add a Group Policy object (GPO) for the Sales OU that redirects user profiles to a
shared folder.
E. Log on by using the local Administrator account and create new folders for User7 and
User8 in the C:\Documents and Settings folder.
F. Select the allow inheritable permissions from parent to propagate to this object option
on the C:\Documents and Settings\Default User folder, and reset the permissions on all
child objects.
G. Move and retain permissions and compressions.
Answer: C, F
Explanation: The problem in this scenario is related to permissions to the
C:\Documents and Settings\Default User folder. To solve this problem you should
grant the Everyone group permission on the C:\Documents and Settings\Default
User folder by adding the group to the DACL (Discretionary Access Control List) of
this folder. You should also specify that the permissions to the C:\Documents and
Settings\Default User folder must propagate to its subfolders; Desktop, Documents,
Favorites and Start menu.
Incorrect answers:
A: The error message indicates that there is a permission problem on the C:\Documents
and Settings\Default User folder, not with permission on Profiles shared folder.
B: Granting the Everyone group permission to the C:\Documents and Settings\Default
User folder rather than just User7 and User8 will reduce administrative effort and would
not have to be repeated for each new user that is added to the domain.
D: The error message indicates that there is a permission problem on the C:\Documents
and Settings\Default User folder. It does not indicate a Group Policy object problem.
E: Granting the Everyone group permission to the C:\Documents and Settings\Default
User folder rather than just User7 and User8 will reduce administrative effort and would
not have to be repeated for each new user that is added to the domain.
G: This is a very vague suggestion, as it does not indicate what permissions should be

moved and what permissions must be retained. Furthermore, file compression is an
invisible process in Windows 2000. The operating system takes care of uncompressing
the compressed files when they need to be read. Therefore file compression is not the
cause of the problem in this scenario.
Reference:
Rick Wallace, Self-Paced MCSE Training Kit (Exam 70-210)-Microsoft Windows 2000
Professional, Microsoft Press, Redmond, 2000, Chapter 14, Lesson 2
QUESTION 42
You are the administrator of Alecnet 'ss network. All users have Windows 2000
Professional computers. Paul, a user in the service department, needs to access the
files that are in a shared folder on his computer. Permissions to access the data in
the shared folder is assigned to a local group named Sales. Paul is a member of the
Sales local group but he cannot access the file he needs.
What should you do?
A. Grant Paul NTFS permission so that he can access any parent folder to files in the
shared folder.
B. Share the Sales folder and grant Paul shared folder permission to access the shared
Sales folder.
C. Remove Paul from any other group that has been explicitly denied access to the Sales
folder.
D. Delete the Sales local group and recreate it. Add individual user accounts from the
Sales department back into Sales local group.
Answer: C
Explanation: The Sales group, which Paul is a member of, has permission to access
the files. However, Paul still cannot access the files. It would seem that Paul has a
permissions conflict. A user can be granted file permissions in a number of contexts:
as a user or as a member of a user group. When a user has different file permissions
in multiple contexts, the most restrictive permission is applied. Furthermore, the
deny permission overrides all other permissions. As Paul does not have access to the
file you must therefore assume Paul has explicitly been denied access to the file in
some context, as member of one or more groups that have been denied access to the
file. You would thus have to remove Paul from such a group so that the restriction is
not applied to Paul.
Incorrect answers:
A: Paul has already got NTFS permission to the file, since he belongs to the Sales group.
The deny permission overrides all other file permissions. You therefore need to remove
Paul's user account from the groups that have been denied access to the file.
B: When a user has different file permissions in multiple contexts, the most restrictive
permission is applied. Furthermore, the deny permission overrides all other permissions.
As Paul does not have access to the file you must therefore assume Paul has explicitly
been denied access to the file in some context, as member of one or more groups that
have been denied access to the file. You would thus have to remove Paul from such a

group so that the restriction is not applied to Paul.