A user is a member of the 'HR' group. A folder has the following permissions: 'HR - Allow Read' (inherited from parent), 'HR - Allow Write' (explicit on the folder). What are the user's effective permissions on the folder?

Neither Read nor Write, because the permissions are contradictory.

Only Write, because explicit permissions override inherited permissions.

Only Read, because inherited permissions override explicit permissions.

Read and Write, because both inherited and explicit allow ACEs are combined.

An administrator sets a DACL on a folder with inheritance flags set to 'This folder and subfolders' but NOT 'Files'. A file already exists in the folder. What is the effective permission on that existing file?

The file retains its existing DACL and does not inherit the new permissions.

The file inherits the folder's DACL because files are always considered subfolders for inheritance.

The file inherits the DACL only if the 'Replace all child object permissions' option is selected.

The file inherits the DACL because inheritance applies to all existing child objects by default.

GIAC Security Essentials

Domain 4Objective 5

Windows Access Controls GSEC Practice Questions (Page 5)

Part of the Endpoint and Platform Security domain, which makes up ~32% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~30–51 in this domain), expect 3–6 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

13concepts

13 Concepts in This Objective

Windows Access Control Model
Security Identifiers (SIDs)
Access Tokens
Security Descriptors
Discretionary Access Control Lists (DACLs)
Access Control Entries (ACEs)
Access Check Algorithm
Inheritance of Permissions
Effective Permissions
Ownership and Take Ownership
Privileges and User Rights
Auditing and SACLs
Access Control Tools

Questions 21–25

21foundation · easy
Which command-line tool is used to display and modify discretionary access control lists (DACLs) on files and folders?
Select an answer first
22application · medium
A user is a member of the 'HR' group. A folder has the following permissions: 'HR - Allow Read' (inherited from parent), 'HR - Allow Write' (explicit on the folder). What are the user's effective permissions on the folder?
Select an answer first
23foundation · easy
Which of the following is a well-known SID that represents the 'Everyone' group?
Select an answer first
24application · medium
An administrator sets a DACL on a folder with inheritance flags set to 'This folder and subfolders' but NOT 'Files'. A file already exists in the folder. What is the effective permission on that existing file?
Select an answer first
25foundation · easy
In the Windows access check algorithm, which type of ACE is evaluated first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GSEC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSEC” is a trademark of its owner, used for identification only.

Windows Access Controls GSEC Practice Questions (Page 5)

Questions 21–25

Which command-line tool is used to display and modify discretionary access control lists (DACLs) on files and folders?

A user is a member of the 'HR' group. A folder has the following permissions: 'HR - Allow Read' (inherited from parent), 'HR - Allow Write' (explicit on the folder). What are the user's effective permissions on the folder?

Which of the following is a well-known SID that represents the 'Everyone' group?

An administrator sets a DACL on a folder with inheritance flags set to 'This folder and subfolders' but NOT 'Files'. A file already exists in the folder. What is the effective permission on that existing file?

In the Windows access check algorithm, which type of ACE is evaluated first?

Keep studying — Endpoint and Platform Security