nerdexam
Juniper

JN0-102 · Question #191

You have been asked to configure a login class that will permit its users to view and edit the configuration. The class should allow a user to view the entire configuration, but only to edit the inter

The correct answer is C. permissions [ view-configuration clear network view ];. To create a login class that allows viewing the entire configuration and editing only specific network-related hierarchies, the view-configuration and network permissions are sufficient.

Configuration Basics

Question

You have been asked to configure a login class that will permit its users to view and edit the configuration. The class should allow a user to view the entire configuration, but only to edit the interfaces, routing-options, and protocols hierarchies. Which configuration accomplishes this login class?

Options

  • Apermissions [ view-configuration clear network view ];
  • Bpermissions [ view-configuration clear network view ];
  • Cpermissions [ view-configuration clear network view ];
  • Dpermissions [ clear network view ];

How the community answered

(56 responses)
  • A
    7% (4)
  • B
    14% (8)
  • C
    75% (42)
  • D
    4% (2)

Why each option

To create a login class that allows viewing the entire configuration and editing only specific network-related hierarchies, the `view-configuration` and `network` permissions are sufficient.

Apermissions [ view-configuration clear network view ];

All choices are textually identical in the provided problem data; if this choice were distinct and lacked the `network` permission, it would not grant the required editing capabilities.

Bpermissions [ view-configuration clear network view ];

All choices are textually identical in the provided problem data; if this choice were distinct and lacked the `network` permission, it would not grant the required editing capabilities.

Cpermissions [ view-configuration clear network view ];Correct

The `network` permission explicitly allows users to view and modify configurations within the interfaces, routing-options, and protocols hierarchies, while `view-configuration` grants access to view the entire configuration.

Dpermissions [ clear network view ];

All choices are textually identical in the provided problem data; if this choice were distinct and lacked the `network` permission, it would not grant the required editing capabilities.

Concept tested: Junos OS login class permissions for granular configuration access

Source: https://www.juniper.net/documentation/us/en/software/junos/user-access/topics/concept/authentication-user-login-classes-overview.html#id-user-defined-login-classes-default-permissions

Topics

#login classes#user permissions#role-based access control#configuration access

Community Discussion

No community discussion yet for this question.

Full JN0-102 Practice