AZ-802 Manage Storage and File Services Practice Question
Exhibit
PS C:\> Get-SmbShare -Name "Accounting" | Select-Object FolderEnumerationMode FolderEnumerationMode --------------------- AccessBased
Refer to the exhibit. An administrator has configured a share with the FolderEnumerationMode shown. What is the result when a user without Read permissions to a specific subfolder browses the share?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The folder is hidden from the user's view entirely.
Access-based enumeration (ABE) is a feature that filters the list of files and folders displayed to users based on their individual permissions. When ABE is enabled, users only see the objects they have at least Read access to, which improves security and reduces confusion in large shared directories.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The user sees the folder but receives 'Access Denied' when opening it.
Why it's wrong here
This behavior occurs when access-based enumeration is disabled. Without ABE, Windows displays all folders within a share to any user who can browse the share level, regardless of whether they have the necessary NTFS permissions to actually open or view the contents of those subfolders.
- ✓
The folder is hidden from the user's view entirely.
Why this is correct
Because FolderEnumerationMode is set to 'AccessBased', the server will check the user's NTFS permissions before sending the list of files and folders to the client. If the user does not have permissions to see a folder, it is omitted from the list and remains invisible.
- ✗
The user is prompted for credentials when clicking the folder.
Why it's wrong here
Windows does not typically prompt for credentials on a per-folder basis when browsing an SMB share. Authentication happens at the session level. If a user lacks permissions, they are either denied access or, if ABE is enabled, they simply do not see the folder in the first place.
- ✗
The share becomes read-only for that user.
Why it's wrong here
FolderEnumerationMode affects visibility, not the actual read/write capabilities of the share. The user's ability to write to files is determined by the combination of share permissions and NTFS permissions, while ABE specifically controls whether the user can see items they are not authorized to access.
About these practice questions
Courseiva writes every AZ-802 question from scratch — 116 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This AZ-802 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-802 exam.