Chapter 6

Question 1

What are privileges granted to a specific system entity, such as users, groups, or computers, which enable them to perform a task or access a resource?

Permissions
Rights
Attributes
Abilities

Answer 1

Permissions

Question 2

What is used to store permissions?

ACL
ACE
Rights tree
Hive

Answer 2

ACL - Access Control List

Question 3

What do you call permissions that run downward through a hierarchy?

Inheritance
Explicit
Translating
Converting

Answer 3

Inheritance

Question 4

Which type of sharing is new to Windows 7?
  Standard sharing 
  Public folder sharing 
  Homegroup sharing 
  NFS sharing

Answer 4

Homegroup sharing

Question 5

What permission must a user have to print to a printer?
  Print 
  Manage Printers 
  Manage Documents 
  Full Access

Answer 5

Print

Question 6

The icacls.exe command performs the following function.
  Shares folders 
  Creates local printes 
  configures NTFS permissions 
  sets network configuration.

Answer 6

configures NTFS permissions

Question 7

access control entries (ACEs)

Answer 7

Each ACE consists of a security principal (that is, the name of the user, group, or computer being granted the permissions) and the specific permissions assigned to that security principal.

Question 8

access control list (ACL)

Answer 8

a collection of individual permissions, in the form of access control entries (ACEs)

Question 9

effective permissions

Answer 9

the combination of Allow permissions and Deny permissions that a security principal receives for a given system element, whether explicitly assigned, inherited, or received through a group membership.

Question 10

NTFS permissions

Answer 10

Control access to the files and folders stored on disk volumes formatted with the NTFS file system. To access a file, whether on the local system or over a network, a user must have the appropriate NTFS permissions.

Question 11

print device

Answer 11

the actual hardware that produces hard copy documents on paper or other print media. Windows 7 supports both local print devices, which are directly attached to the computer’s parallel, serial, Universal Serial Bus (USB), or IEEE 1394 (FireWire) ports, or network interface print devices, which are connected to the network, either directly or through another computer.

Question 12

printer

Answer 12

the software interface through which a computer communicates with a print device. Windows 7 supports numerous interfaces, including parallel (LPT), serial (COM), USB, IEEE 1394, Infrared Data Access (IrDA), and Bluetooth ports, and network printing services such as lpr, Internet Printing Protocol (IPP), and standard TCP/IP ports.

Question 13

printer control language (PCL)

Answer 13

a language understood by the printer. PCLs can be standardized, as in the case of the PostScript language, or they can be proprietary languages developed by the print device manager.

Question 14

printer driver

Answer 14

a device driver that converts the print jobs generated by applications into an appropriate string of commands for a specific print device. Printer drivers are designed for a specific print device and provide applications with access to all of the print device’s features.

Question 15

print server

Answer 15

a computer (or stand‐alone device) that receives print jobs from clients and sends them to print devices that are either locally attached or connected to the network.

Question 16

security principal

Answer 16

the name of the user, group, or computer being granted the permissions

Question 17

Share permissions

Answer 17

Control access to files and folders shared over a network. To access a file over a network, a user must have appropriate share permissions and appropriate NTFS permissions.

Question 18

Registry permissions

Answer 18

Control access to specific parts of the Windows registry. An application that modifies registry settings or a user attempting to manually modify the registry must have the appropriate registry permissions.

Question 19

Active Directory permissions

Answer 19

Control access to specific parts of an Active Directory hierarchy. Although Windows 7 cannot host an Active Directory domain, desktop technicians might require these permissions when servicing computers that are members of a domain.

Question 20

security identifiers (SIDs)

Answer 20

the security principals involved are users and groups

Question 21

security access token

Answer 21

contains the SIDs for the user’s account and all of the groups to which the user belongs

Question 22

authorization

Answer 22

compares these SIDs to those stored in the file or folder’s ACEs to determine what access the user should have