Record View security url

Question

A user has a direct URL to access a record view. Which configuration(s) would allow the user this access?

A. A combination of user filters, source security, and record type security are required. 
 B. Source security is all that is required. 
 C. A combination of data source security, record type security, and default filler configuration (if it is set) are required. 
 D. Record Type security is all that is required.

Mike Schmitt · Answer

Is this a test question? 
 Generally, different security settings for one thing all "stack" together - so any given user would need to satisfy all given security / viewership conditions in order to view something, whether that be a record view or a related action (etc). Attempting to access a URL for something they don't actually have access to at one level or another, will generally result in an error message.

Mathieu Drouin · Answer

You need Source and Record security at a minimum to access the Record view. Whether they see any data on that Record depends on the source filters. 
 I would say C.