Question 16 of 144
SK0-005 server-administration Practice Question
A Windows Server 2019 file server hosts a shared folder named \\FS01\SalesDocs. The share permissions are configured to grant the 'Everyone' group Full Control. The NTFS permissions on the D:\Shares\SalesDocs folder are set as follows: The 'Sales' security group has Allow Read & Execute, List Folder Contents, and Read. The 'Managers' group has Allow Modify. A user, Alice, is a member of the 'Sales' group and also a member of the 'Temporary_Contractors' group. She recently had her account moved from the 'Contractors' OU to the 'Sales' OU. When Alice attempts to access \\FS01\SalesDocs from her Windows 10 workstation, she receives an 'Access Denied' error. Other members of the 'Sales' group can access the folder without issues. The administrator verifies that Alice's group membership includes both 'Sales' and 'Temporary_Contractors'. The effective permissions tool on the folder shows that Alice should have Read access. However, she still cannot access the share. Which of the following is the most likely cause of Alice's access denial and the appropriate next step to resolve it?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The 'Temporary_Contractors' group has an explicit Deny permission on the NTFS security for D:\Shares\SalesDocs, which overrides her Allow permissions. The administrator should remove Alice from that group or modify the Deny entry.
Option A is correct because an explicit Deny permission for Temporary_Contractors would override all Allow permissions, resulting in access denied despite the effective permissions tool showing allowed access (which may not account for Deny in all views). Option B is incorrect because 'Everyone' includes authenticated users, and the share permissions are permissive. Option C suggests a token issue, but effective permissions already reflect her group membership; a token issue would typically result in no access to Sales group resources, conflicting with others' access. Option D is unlikely without other offline files symptoms.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Alice's user token was not updated after her OU move; she needs to log off and log back on to obtain the new group membership, but the token hadn't expired. The administrator should wait or force logoff.
Why it's wrong here
Effective permissions check would reflect current token; since it shows Read, the token is likely updated. Additionally, other Sales members can access, suggesting it's not a group membership sync issue.
- ✗
Her workstation's offline files cache is corrupt, causing access denied. The administrator should clear the CSC cache on her machine.
Why it's wrong here
Offline files cache corruption typically results in synchronization errors, not access denied to a live share, and there is no indication offline files are enabled.
- ✓
The 'Temporary_Contractors' group has an explicit Deny permission on the NTFS security for D:\Shares\SalesDocs, which overrides her Allow permissions. The administrator should remove Alice from that group or modify the Deny entry.
Why this is correct
Deny permissions take precedence. The hidden Deny for her second group explains the access denied despite apparent effective Allow.
- ✗
The share permissions 'Everyone Full Control' are invalid because 'Everyone' does not include authenticated users from other domains. The administrator should add 'Authenticated Users' with Change permission.
Why it's wrong here
'Everyone' includes all authenticated users; share permissions are not the issue since other domain users can access the share.
Visual reference
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jul 26, 2026
This SK0-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SK0-005 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.