MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

22-14 Chapter 22 Implementing and Conducting Administration of Resources
Objective 2.2 Answers
1. Correct Answers: A and D
A. Correct: Administrators, by default, can create shares on Windows XP Professional
systems. Select the Computer Administrator account type to place a user
only into the Administrators group when using the User Accounts Wizard. Grant
this privilege only to users who understand the security implications associated
with sharing folders across a network.
B. Incorrect: The Network Configuration Operators group provides a member user
with the ability to modify network parameters such as an IP address. However, it
does not provide the ability to share folders.
C. Incorrect: Although Backup Operators can access the entire file system for the
purpose of backing up files, they do not have the ability to share folders.
D. Correct: Power Users, by default, can create shares on Windows XP Professional
systems. User accounts cannot be placed in the Power Users group directly from
the Control Panel, however. To place a user account into the Power Users group,
use the Computer Management administrative utility. Grant Power Users privilege
only to users who understand the security implications associated with sharing
folders across a network.
E. Incorrect: One of the differences between the Power Users and the Users groups
is that the Users group lacks the ability to create shared folders. Creating a shared
folder provides access to the contents of that folder across the network, and, as a
result, can weaken the security of a system if misused. Therefore, place users who
do not understand the implications of shared folders only into the Users group.
Select the Limited account type to place a user only into the Users group when
using the User Accounts Wizard.
2. Correct Answers: D
A. Incorrect: This answer is incorrect for the reasons stated in answer D.
B. Incorrect: This answer is incorrect for the reasons stated in answer D.
C. Incorrect: This answer is incorrect for the reasons stated in answer D.
D. Correct: Hidden shares are created by ending the share name with a $.
3. Correct Answers: B
A. Incorrect: Users have No Access rights to the share only if they are explicitly
assigned No Access or if they, or any group they belong to, are not named in the
permissions. In this case, the user has been assigned Change file permissions and
Read share permissions.