Как вы думаете какой ответ будет правильным?
You have just created an ASP.Net application using C#. You also need to confige the
Web.config file. You ensure that Baker can access all of the application's resources,
except for those resources that are located in the /Apps/ResumeApplication directory.
Baker is a member of the HRDepartment group.
What should you do? (Select the best choice.)
A.
<system.web>
<authorization>
<allow roles="HRDepartment" />
<deny roles="HRExecutives" />
<deny users="*" />
</authorization>
</system.web>
<location path="/apps/resumeApplication">
<system.web>
<authorization>
<allow roles="HRExecutives"/>
<deny users="?" />
</authorization>
</system.web>
B.
<system.web>
<authorization>
<allow roles="HRDepartment" />
<deny roles="HRExecutives" />
<deny users="*" />
</authorization>
</system.web>
<system.web>
<authorization>
<allow roles="HRExecutives"/>
<deny users="?" />
</authorization>
<system.web>
<authorization>
<allow roles="HRDepartment" />
<deny roles="HRExecutives" />
<deny users="*" />
</authorization>
</system.web>
<location path="/apps/resumeApplication">
</system.web>
C.
<system.web>
<authorization>
<allow roles="HRDepartment" />
<deny users="*" />
</authorization>
</system.web>
<location path="/apps/resumeApplication">
<system.web>
<authorization>
<allow roles="HRExecutives"/>
<deny users="?" />
</authorization>
</system.web>
D.
<location path="/apps/resumeApplication">
<system.web>
<authorization>
<allow roles="HRExecutives"/>
<deny users="?" />
</authorization>
</system.web>

TK считает, что A. Хотя мне кажется что D.

Answer: A
Baker can access all of the application's resources, including the resources in the
/Apps/ResumeApplication directory. The first <authorization> section beginning on line 120
grants the
HRDepartment group access to the application; thus, by virtue of his membership in the
HRDepartment group, Baker can access the application. The second <authorization> block
beginning on line 200 revokes access to the resources in the /Apps/ResumeApplication
directory from anonymous users, but it does not revoke this access from Baker. Therefore,
Baker can access the entire application.

но ведь он как раз не имеет доступа к Apps/ResumeApplication directory.