Examice

Exam JN0-105 All QuestionsBrowse all questions from this exam

Go to Exam

Question 17

You configured your system authentication order using the set authentication-order tacplus radius password command.

Which statement is correct in this scenario?

A rejection by TACACS+ will prevent a login and bypass the other two authentication methods.

The password authentication will only be used if the TACACS+ and RADIUS servers fail to respond.

All authentication methods are used with the most restrictive permission set used.

The password authentication method is evaluated if the TACACS+ and RADIUS servers respond with a reject message.

Correct Answer: B

When the authentication order is configured with TACACS+, RADIUS, and then password, the system will sequentially try TACACS+ first, then RADIUS. If neither TACACS+ nor RADIUS servers respond, the system will fall back to password authentication as the last resort. This ensures that users can still authenticate using locally stored passwords if external authentication servers are unavailable.

Discussion

b39dcd4Option: B

B accurately describes the scenario where password authentication is used as a last resort when both TACACS+ and RADIUS servers fail to respond.

4d82270Option: B

If the authentication order includes RADIUS or TACACS+ servers, but the servers do not respond to a request, Junos OS always defaults to trying local password authentication as a last resort.

e308d74Option: B

Seems the correct answer should be (B) Explanation: In the scenario where the system authentication order is set to 'tacplus radius password,' the correct statement is (B). If the TACACS+ and RADIUS servers are unreachable or fail to respond, the system will fall back to using password authentication. This ensures that users can still authenticate using locally stored passwords if external authentication servers are unavailable.

dthensleyOption: C

Actually C is the correct answer.

dthensleyOption: D

D is the correct answer because you have three types of authentication listed in the config and because of that it will try all three regardless of any failures or rejects. If password wasn't listed and a rejection was recived by either tacplus or radius then password will not be referenced.

82986cf

https://www.networkcuriosity.com/junos-authentication-order/#:~:text=Junos%20can%20authenticate%20users%20using,locally%20configured%20accounts%20and%20passwords.

82986cfOption: A

A and B are both correct. C and D are wrong. If the first option responds with a reject the other options are not tried. If the first one doesn’t respond then the router tries the next option.