Juniper JN0-102 Exam: Login Class Configuration for Viewing and Editing Configuration

Configure Login Class for Viewing and Editing Configuration

Prev Question Next Question

Question

You have been asked to configure a login class that will permit its users to view and edit the configuration. The class should allow a user to view the entire configuration, but only to edit the interfaces, routing-options, and protocols hierarchies.

Which configuration accomplishes this login class?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C

The correct answer is C.

Explanation:

In order to create a login class that allows users to view and edit the configuration, we need to use the following two statements:

  1. permissions statement: This statement defines the permissions for the user. In this case, we want the user to be able to view the entire configuration and edit only the interfaces, routing-options, and protocols hierarchies. The syntax for this statement is:

permissions [ view-configuration clear network view ];

This statement allows the user to view the configuration, clear the interface statistics, view network-related information, and view hidden fields in the configuration.

  1. allow-configuration statement: This statement defines the parts of the configuration that the user is allowed to edit. In this case, we want the user to be able to edit the interfaces, routing-options, and protocols hierarchies. The syntax for this statement is:

allow-configuration "(interfaces) | (routing-options) | (protocols)";

This statement allows the user to edit the specified configuration hierarchies.

Therefore, the correct configuration for the login class is:

permissions [ view-configuration clear network view ]; allow-commands "(configure)"; allow-configuration "(interfaces) | (routing-options) | (protocols)";

Option A is incorrect because it does not include the allow-commands statement, which allows the user to enter configuration mode.

Option B is incorrect because it only includes the allow-commands statement, but not the allow-configuration statement.

Option D is incorrect because it does not include the view-configuration statement, which allows the user to view the configuration.