Turning off the default aggregation affects how directory permissions are evaluated. Which statement is true?

Turning off the default aggregation affects how directory permissions are evaluated. Which statement is true?

• A. The system will check all directories for every permission.
• B. The directory order becomes significant and membership is checked only in the first directory where the user appears.
• C. Permissions are ignored entirely.
• D. Group membership is randomly determined.

Answer: (B)

Turning off default aggregation changes how directory permissions are evaluated by performing a non-aggregated, first-match lookup across directories. The directory order becomes significant because the permission check stops at the first directory that contains the user, using that directory’s membership and its permissions rather than combining rules from all directories. So the statement describing an order-dependent lookup with membership decided in the first matching directory is the accurate description of this mode. In contrast, if aggregation were on, permissions from all directories would be considered; saying that the system checks every directory for every permission would reflect that alternative. The notion that permissions are ignored or that group membership is randomly determined isn’t accurate in this context.

Turning off default aggregation changes how directory permissions are evaluated by performing a non-aggregated, first-match lookup across directories. The directory order becomes significant because the permission check stops at the first directory that contains the user, using that directory’s membership and its permissions rather than combining rules from all directories. So the statement describing an order-dependent lookup with membership decided in the first matching directory is the accurate description of this mode. In contrast, if aggregation were on, permissions from all directories would be considered; saying that the system checks every directory for every permission would reflect that alternative. The notion that permissions are ignored or that group membership is randomly determined isn’t accurate in this context.