Lesson 3 - Chapter 3: Permissions Based on User Accounts and Groups Flashcards

1
Q

What’s the purpose of using the UAC security feature?

A

helps to prevent major system changes from being made like installing unauthorized applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How is the security level of UAC configured?

A

Through User Accounts in the Control Panel

(Change User Account Control setting)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are the 4 security level options on the User Account Control settings slider?

A
  1. Always notify me when
  2. Notify me only when apps try to make changes to my computer (default)
  3. Notify me only when apps try to make changes to my computer (do not dim my desktop)
  4. Never notify
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the 2 types of file and folder security that Windows has? What’s the difference?

A
  1. Windows sharing (folders only, network only)
  2. NTFS sharing (both, local and network)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What do Windows share permissions control? Is it via network or local access?

A

Share permissions control who can access shared folders (and in what ways) via the network [only]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Windows Share permissions relate to both local and network-shared folders. T or F?

A

False only network, share permissions do not apply to local access (a different user account on the same PC)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What file systems do (windows?) Share permissions work on?

A

Any file system (NTFS, FAT32, etc)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

NTFS Permissions apply only to local access. T or F?

A

False, NTFS permissions apply to both local access and network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

NTFS permissions apply only to files and folders stored on what kind of formatted volume?

A

NTFS-formatted volumes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How do you access NTFS permissions?

A

Properties > Security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How do you access sharing permissions?

A

Properties > Sharing

for the folder

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What happens when both Windows and NTFS sharing are used?

A

The more restrictive permissions prevail

(Sharing = Everyone can r/w but NTFS = Everyone can r, then read only would prevail)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Sharing permissions apply only to _____

A

folders (not individual files)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the 2 ways that sharing permissions can be set?

A
  1. Standard sharing
  2. Advanced sharing
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

When would you use standard sharing?

A

when you just need a simple share with one or more users or groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

When would you use advanced sharing?

A

use advanced sharing when you have special sharing needs that the standard method can’t meet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What’s the difference between the Change and Full Control folder permissions?

A

Change doesn’t grant the ability to change the folder’s permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Make sure you don’t use the ___ column when you’re trying to “not allow”

A

deny

(turning off the Allow permission has the desired effect with no potential bug effects)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What happens if you mix Allow and Deny permissions on nested folders?

A

It can create file access problems that are hard to troubleshoot

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What’s the main reason why you would use a Deny permission?

A

To override an inherited Allow permission for a folder

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the 5 standard options for NTFS file permissions?

A
  1. Full control
  2. Modify
  3. Read & Execute
  4. Read
  5. Write
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are the NTFS&raquo_space;folder&laquo_space;permissions? (2)

Folder permissions define what a user may do to a folder

A
  1. The standard file permissions (Full control, modify, read & execute, read, write)
  2. List Folder contents
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is the Change permission (NTFS permission) for other users?

A

enables an account to add or remove permissions for other users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the NTFS Ownership permission? Who can you block?

A

You own the files/folders you create on the NTFS partition w/ full permission

(can even block administrators from accessing them)

25
Q

What is the Take Ownership NTFS permission?

A

Anyone (admins have this permission for everything) can take ownership and then access the file

26
Q

What is inheritance?

A

determines what&raquo_space;NTFS&laquo_space;permissions apply to new files or subfolders

27
Q

What rule does inheritance follow?

A

default rule: new files/folders get the NTFS permissions of parent folder

28
Q

How do you visually check to see if a folder has inherited permissions?

A

It has a gray checkmark and can’t be changed

29
Q

How do you override inherited permissions?

A

Use the Deny checkbox

30
Q

What happens if you have ‘Full Control’ on a folder but only ‘Read’ on a file in it?

A

You still get Full Control on the file

31
Q

What is permission propagation?

A

tells you which permissions apply to files and folders that you move/copy over (original permissions or destination permissions?)

32
Q

What permissions apply to files/folders that are copied to another place in the same volume? What about to a different volume? (2)

[inheritance]

A

COPY
1. Same volume = inherits new permissions
2. Different volume = inherits new permissions

33
Q

What inheritance permissions apply to files/folders that are moved to another place in the same volume? What about to a different volume? (2)

A

MOVE
1. Same volume = keeps original permissions
2. Different volume = inherits new permissions

34
Q

How do you define a group in terms of accounts?

A

a collection of user accounts that have something in common

35
Q

You can apply permissions to a ___ and affect all user accounts within

A

group

36
Q

What are the 5 built-in groups with predetermined access levels?

A
  1. Administrators
  2. Power Users
  3. Users
  4. Guests
  5. Everyone
37
Q

What permissions does the Power Users group have? (cannot?) 2

A
  1. cannot install new devices
  2. Access other users’ files/folders unless the file/folder permissions grant them access
38
Q

What permissions can the Users group have? (can, cannot?) [2]

Cannot edit
Can create

A
  1. cannot edit the Registry or access critical system files
  2. can create groups but can only manage the ones they create
39
Q

What are effective permissions?

A

the actual permissions that a user ends up with

(factors in all the different kinds of permissions and all the groups user is in)

40
Q

How do you view a user’s effective access to a certain folder? (6 steps)

A
  1. properties
  2. security
  3. advanced
  4. effective access
  5. type in user name > check name
  6. view effective access
41
Q

Any administrator account can use the ___ ___ permission to seize any file or folder on a computer

A

Take Ownership

(use encryption to secure data)

42
Q

What encryption options does Windows Home editions have?

A

Basically none

43
Q

What encryption options do other editions besides Home have? (2) can encrypt?

A

Encrypt:
1. files and folders
2. full-drive encryption

44
Q

What does EFS stand for?

A

Encrypting File System

45
Q

What is EFS?

A

an encryption scheme that any user can use to encrypt individual files or folders

46
Q

What Windows editions support EFS?

A

Pro and Enterprise editions of Win10/11

47
Q

How do you encrypt a file/folder? (4 steps)

A
  1. Right click > Properties
  2. General
  3. Advanced
  4. Encrypt contents to secure data
48
Q

If you use EFS, it’s wise to make a…?

A

password reset disk so you don’t get locked out of your files/folders

49
Q

Which Windows editions offer the BitLocker Drive Encryption?

A

Pro and Enterprise editions Win 10/11

50
Q

What does BitLocker Drive Encryption do?

A

Encrypts the whole drive (every user’s files)

51
Q

If the system has a TPM chip, what can Bitlocker Drive Encryption do?

A

validate on boot that the computer has not changed

52
Q

What should you do when you enable Bitlocker?

A

Create a recovery key or password and keep it secure (like a safe)

53
Q

How do you enable Bitlocker?

A

Double-click BitLocker Drive Encryption in the Control Panel and click Turn on BitLocker

54
Q

What is Bitlocker To Go?

A

enables you to encrypt removable media (like USB flash drive) and require a password to access its data

55
Q

What’s the difference between EFS and BitLocker?

A

EFS = encrypts at the folder level
BitLocker = encrypts at the disk level

56
Q

Can NTFS permissions be applied to FAT32 and FAT file systems?

A

No

Only Share permissions can be applied to FAT and FAT32 file systems

57
Q

NTFS permissions apply to users who are….

A

Unlike Share permissions, NTFS permissions apply to users who are logged on to the server locally.

58
Q

Unlike NTFS permissions, share permissions allow you to restrict the…

A

number of concurrent connections to a shared folder.

59
Q

What is the Change Sharing permission?

A

Allows users to read, add, edit and delete files and folders. “Change” permissions are not assigned by default.