1. Tom creates a folder named Data and shares it for use for a group called Sales, and wants the members of the Sales group to only be able to write files to the folder. What share and NTFS permissions to the Sales group?
(This is actually a question that's an exhibit and you got to configure the exhibit box).
The given answer is:
Share permissions for Sales: Change
NTFS permissions for Sales: Deny Modify.
2. You are the network administrator for your company. The network consists of a single Active Directory domain named bigfirm.com. All servers run Windows Server 2003. All users log on to the domain to access resources. All files and folders are stored on a member server named FS. You need to configure permissions for a folder named Data. You must ensure that authenticated users cannot create new files directly in Data. This restriction must not affect any other
permissions set on Data, on the contents of its subfolders, or on its existing files. Users must still be able to modify files in Data.
Given answer is: Allow - Read Extended Attributes


Someone please explain these answers to me.