Explanation
NO, NO, YES
''For example, for a resource, if you assign a user the Read permission and assign the Modify permission on a groep that the same user is member of, the effective acces permissions are a combination of the Read permissions and the modify permissions, wich is modify permission. When you combine Permissions that include Deny permissions, NTFS will evaluate the the deny permissions before the alloe permissions that are set on the same resource with explicit deny taking precedence over all Allow Permissions"