Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
You configured your system authentication order using the set authentication-order tacplus radius password command. Which statement is correct in this scenario?
A.
A rejection by TACACS+ will prevent a login and bypass the other two authentication methods.
B.
The password authentication will only be used if the TACACS+ and RADIUS servers fail to respond.
C.
All authentication methods are used with the most restrictive permission set used.
D.
The password authentication method is evaluated if the TACACS+ and RADIUS servers respond with a reject message.
D is the correct answer because you have three types of authentication listed in the config and because of that it will try all three regardless of any failures or rejects. If password wasn't listed and a rejection was recived by either tacplus or radius then password will not be referenced.
A and B are both correct. C and D are wrong. If the first option responds with a reject the other options are not tried. If the first one doesn’t respond then the router tries the next option.
If the authentication order includes RADIUS or TACACS+ servers, but the servers do not respond to a request, Junos OS always defaults to trying local password authentication as a last resort.
Seems the correct answer should be (B)
Explanation:
In the scenario where the system authentication order is set to 'tacplus radius password,' the correct statement is (B). If the TACACS+ and RADIUS servers are unreachable or fail to respond, the system will fall back to using
password authentication. This ensures that users can still authenticate using locally stored passwords if external authentication servers are unavailable.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
dthensley
4 days, 20 hours agodthensley
4 days, 20 hours ago82986cf
1 week agob39dcd4
2 weeks, 3 days ago4d82270
3 weeks agoe308d74
3 weeks, 4 days ago