exam questions

Exam JN0-104 All Questions

View all questions & answers for the JN0-104 exam

Exam JN0-104 topic 1 question 87 discussion

Actual exam question from Juniper's JN0-104
Question #: 87
Topic #: 1
[All JN0-104 Questions]

Which statement is true about using custom login class permissions?

  • A. If you allow and deny the same command, the command is denied.
  • B. If you allow and deny the same command, Junos OS will randomly choose the action.
  • C. If you allow and deny the same command, the command is allowed.
  • D. If you allow and deny the same command, the Junos OS will fail the commit check.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Cradical
2 years, 1 month ago
Selected Answer: A
The correct statement is: A. If you allow and deny the same command, the command is denied. When configuring custom login class permissions in Junos OS, if you explicitly allow and deny the same command within the same login class, the deny action takes precedence. This means that the command will be denied for users belonging to that login class, even if it is explicitly allowed elsewhere in the configuration. The deny action overrides the allow action for the specific command.
upvoted 2 times
...
EngNawaf
2 years, 2 months ago
Selected Answer: C
set system login class myclass allow-commands "show interfaces" set system login class myclass deny-commands "show interfaces" the command will be allowed
upvoted 4 times
...
Jienex
2 years, 2 months ago
Selected Answer: C
This is pretty obvious. should be C
upvoted 1 times
...
jj970us
2 years, 5 months ago
Selected Answer: C
C should be the correct answer.
upvoted 1 times
...
Aidar5
2 years, 7 months ago
C is correct: Understanding the Allow and Deny Statement Precedence and Matching By default, the allow-commands and allow-configuration regular expressions take precedence over deny-commands and deny-configuration expresssions. Thus, if you configure the same command for both the allow-commands and deny-commands statements, then the allow operation takes precedence over the deny operation.
upvoted 1 times
...
_muxa_
2 years, 7 months ago
Selected Answer: C
Answer C
upvoted 1 times
...
jj970us
2 years, 8 months ago
A is the correct answer. https://supportportal.juniper.net/s/article/Understanding-access-privileges-in-operational-and-configuration-mode?language=en_US
upvoted 1 times
jj970us
2 years, 8 months ago
Sorry, I mean "C" is the correct answer.
upvoted 2 times
...
...
misu112
2 years, 9 months ago
C is answer
upvoted 1 times
...
Munrra
2 years, 9 months ago
"A" should be the correct one
upvoted 4 times
aisa007
2 years, 8 months ago
Why A?
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...