Your network contains an Active Directory domain named contoso.com. The domain contains a domain-based Distributed File System (DFS) namespace named Namespace1 that has access-based enumeration enabled. Namespace1 has a folder named folder1. Folder1 has a target of \Server1Folder1.
The permissions for folder1 are configured as shown in the following table.
Access-based enumeration is disabled for the share of Folder1.
You need to ensure that both User1 and User2 can see Folder1 when they access \Contoso.comNameSpace1.
What should you do?
A. Assign User2 the read DFS permission to Folder1.
B. Assign User1 the read NTFS permission to Folder1
C. Run the Set-DfsnFolderTarget cmdlet.
D. Assign User1 the read Share permission to Folder1
Has to have the NTFS permissions applied…..
A
Access-based enumeration does not prevent users from getting a referral to a folder target if they already know the DFS path. Only the share permissions or the NTFS file system permissions of the folder target (shared folder) itself can prevent users from accessing a folder target. DFS folder permissions are used only for displaying or hiding DFS folders, not for controlling access, making Read access the only relevant permission at the DFS folder level
I did some tests in the laboratory, the correct answer is the letter A.
Should be B