Windows Access Controls GSEC Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A security administrator needs to allow a support technician to change the owner of files in a specific folder, but the technician must not be able to modify the files' DACLs or grant themselves additional permissions. Which built-in privilege or permission should be assigned?

   • ASeTakeOwnershipPrivilege
   • B'Change Permissions' permission on the folder
   • CSeDebugPrivilege
   • D'Full Control' permission on the folder
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the function of the System Access Control List (SACL) in a security descriptor?

   • AIt defines the permissions for the object's owner.
   • BIt specifies which access attempts are audited.
   • CIt lists the groups that can access the object.
   • DIt stores the object's encryption key.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the function of a System Access Control List (SACL) in Windows auditing?

   • AIt specifies which access attempts (success or failure) are recorded in the security log.
   • BIt stores the object's owner information.
   • CIt prevents unauthorized access to the object.
   • DIt defines which users can access the object.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the result of an access check if the DACL does not contain any ACE that matches the user's token?

   • AAccess is granted with read-only permissions.
   • BAccess is granted with full control.
   • CThe user is prompted for credentials.
   • DAccess is denied.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A user logs on to a Windows workstation and launches a process. The process attempts to access a file. Which access token does the system use for the access check?

   • AThe user's restricted token, which excludes all group SIDs.
   • BThe system's access token, because the system performs the access check.
   • CThe user's primary access token, which contains the user's SID and group SIDs.
   • DA new token created for each process, containing only the process's own SID.
   Reveal Solution Discussion Select an answer first