Statement 1 (No): When accessing a file via a network share, the most restrictive permission between Share and NTFS applies (Effective Permissions). While User1 has NTFS Full Control, the Share permissions for Domain Users are limited to Change and Read. The Change permission allows modification and deletion but does not grant the right to Take Ownership or change permissions; Full Control at the share level is required for that.

Statement 2 (Yes): The setting FolderEnumerationMode : AccessBased indicates Access-Based Enumeration (ABE) is enabled. ABE hides files unless a user has Read (or List) permissions. User2 has explicit NTFS Read permission, so the file is visible.

Statement 3 (No): User3 has explicit NTFS Write permission but lacks Read permission. The "Enable inheritance" button in the exhibit confirms inheritance is disabled, and the Domain Users group is not listed in the NTFS ACL, so User3 cannot inherit read rights. Since User3 implies "Write-only" (Drop-box scenario) and cannot read the file, ABE hides it from their view.

Microsoft Learn (Windows Server): Share and NTFS Permissions on a File Server. Explains that the most restrictive permission applies when accessing shared resources and that Change share permission does not include Full Control rights (like taking ownership).

Microsoft Learn (Windows Server): Enable Access-based Enumeration on a Namespace. Confirms that ABE displays only the files and folders that a user has permission to access (specifically requiring Read/List permissions).

Microsoft Official Courseware (AZ-800): Administering Windows Server Hybrid Core Infrastructure. Section on File and Storage Services, covering effective permissions and Access-Based Enumeration logic.