CompTIA Security+ SY0-701 Practice Question

The correct set of permissions would allow the accounting department to modify the contents (Write permission), while restricting the auditing and sales departments to viewing the contents without making any changes (Read permission). 'Read & execute' permission would allow users to run executable files, which is not a requirement in this scenario. 'Modify' permission grants the ability to read, write, and delete, which should only be given to the accounting department. 'Full control' is an excessive permission for the auditing and sales departments since it permits them to have all possible permissions on the files/folders, including changing permissions and taking ownership, which contradicts the principle of least privilege.