FC0-U71 Security Practice Question
A technician is configuring a Windows workstation for a finance employee. The employee needs to read and update customer records but should not be able to change the folder's permissions or take ownership. Which NTFS permission should the technician assign?
⚠ Common exam trap
The trap here is equating the ability to edit files with the ability to change permissions, which only Full control and the special Change permissions right provide.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Modify
Modify grants read, write, edit, and delete capabilities on files and subfolders without allowing the user to change permissions or take ownership. That matches the finance employee's need to read and update records while leaving the folder's security settings under administrative control. Full control would be excessive, while Read & execute and Write each fail to cover the required read-and-update combination.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Read & execute
Why it's wrong here
Read & execute lets the user view files and run programs but not save changes to existing records. The employee must update customer records, which requires write capability. This permission is too restrictive for the scenario and would prevent the core job function. It also does not grant delete rights, so even removing obsolete records would fail.
- ✗
Full control
Why it's wrong here
Full control includes the ability to change permissions and take ownership, which exceeds what the employee needs. Assigning it would let the user alter access control lists or seize ownership of the folder, violating the requirement that permissions remain unchanged. Full control is typically reserved for administrators or owners responsible for managing the resource, not for users who only need to work with its contents.
- ✗
Write
Why it's wrong here
Write permits creating and changing files but does not include reading them by default, and it lacks delete rights. An employee who must read and update existing records would be unable to open them for review. This permission is also narrower than needed in other ways, so it neither satisfies the read requirement nor the full update workflow described in the scenario.
- ✓
Modify
Why this is correct
Modify allows a user to read, write, edit, and delete files and subfolders, which covers reading and updating customer records. It does not include the change-permissions or take-ownership rights that Full control provides, so the employee cannot alter the folder's access control list. This matches the stated requirement precisely and follows the principle of least privilege for a data-entry role.
Go deeper
Related to this question
About these practice questions
One of 988 original FC0-U71 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This FC0-U71 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the FC0-U71 exam.