What is the best practice when setting security access on folders?

What is the best practice when setting security access on folders?

• A. Assign access using Groups.
• B. Assign access to individuals only.
• C. Deny by default for all.
• D. Don't use groups.

Answer: (A)

Using groups to control folder permissions is the best practice because it makes access management scalable and easy to maintain. When rights are assigned to a group, users gain access by being members of that group, so adding a new employee or removing someone is a matter of updating group membership rather than editing many individual ACL entries. This reduces errors, simplifies audits, and ensures consistent access across the organization. Granting access to individuals is not scalable and tends to drift as people join, move, or leave. Denying by default is a solid security principle, but applying it effectively across many folders is impractical without the structure groups provide. Not using groups defeats centralized control and makes ongoing maintenance harder.

Using groups to control folder permissions is the best practice because it makes access management scalable and easy to maintain. When rights are assigned to a group, users gain access by being members of that group, so adding a new employee or removing someone is a matter of updating group membership rather than editing many individual ACL entries. This reduces errors, simplifies audits, and ensures consistent access across the organization. Granting access to individuals is not scalable and tends to drift as people join, move, or leave. Denying by default is a solid security principle, but applying it effectively across many folders is impractical without the structure groups provide. Not using groups defeats centralized control and makes ongoing maintenance harder.