mediumMultiple ChoiceObjective-mapped
SSCP Practice Question: The security team discovers that a user in the…
The security team discovers that a user in the finance department can read files in the human resources share. The share permissions on the HR folder are set to deny all except the HR group, and the user is not a member of HR. What is the most likely cause?
⚠ Common exam trap
ISC2 often tests the distinction between share permissions and NTFS permissions, specifically that share permissions only apply to network access, not local logons, leading candidates to overlook the local logon scenario.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The user is logging on locally to the server where the files are stored
When a user logs on locally to the file server, Windows evaluates NTFS permissions directly, bypassing share permissions entirely. Share permissions only apply to network access via SMB, so a local logon allows the user to read files if NTFS permissions grant access, even if share permissions deny all except the HR group.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The user is logging on locally to the server where the files are stored
Why this is correct
Share permissions only apply to network access; local access is governed by NTFS permissions alone, which may allow the user.
- ✗
The user is an administrator on the file server
Why it's wrong here
Even an administrator would be subject to share permissions; they would not bypass them unless taking ownership.
- ✗
The user is using a different file server for HR files
Why it's wrong here
If the files are on a different share, this question would not be about the same HR folder.
- ✗
The user's token includes a group that has been explicitly denied
Why it's wrong here
Explicit deny overrides allow; but if denied, access would be blocked, not granted.
Go deeper
Related to this question
About these practice questions
This SSCP question is part of Courseiva's 920-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.