Which statement about NTFS file access is true?

Which statement about NTFS file access is true?

• A. NT ACLs and SID
• B. NT ACLs and UNIX permissions
• C. SID and password
• D. UNIX permissions

Answer: (A)

NTFS file access is controlled by NT ACLs and SIDs. In NTFS, a security descriptor for a file or folder contains an Access Control List. Each entry (ACE) in that list specifies a permission set and the Security Identifier (SID) of the user or group it applies to. When access is attempted, the system checks these SIDs and their corresponding permissions (allow or deny) to decide what the user can do. A password isn’t used in the access decision—authentication proves identity, while authorization uses the ACLs. UNIX permissions aren’t part of NTFS authorization, though some interoperability features can map permissions, standard NTFS checks rely on ACLs and SIDs.

NTFS file access is controlled by NT ACLs and SIDs. In NTFS, a security descriptor for a file or folder contains an Access Control List. Each entry (ACE) in that list specifies a permission set and the Security Identifier (SID) of the user or group it applies to. When access is attempted, the system checks these SIDs and their corresponding permissions (allow or deny) to decide what the user can do. A password isn’t used in the access decision—authentication proves identity, while authorization uses the ACLs. UNIX permissions aren’t part of NTFS authorization, though some interoperability features can map permissions, standard NTFS checks rely on ACLs and SIDs.