JNCIA-Junos: Juniper Networks Certified Associate – Junos — Question 91

Given the configuration shown below:
set system authentication-order [ tacplus ]
Which two statements are correct? (Choose two.)

Answer options

• A. If the TACACS+ server is not available, the local user database is checked.
• B. If the TACACS+ server is available and rejects the username/password provided, the user is not allowed to access the device.
• C. If the TACACS+ server is not available, the user is not allowed to access the device.
• D. If the TACACS+ server is available and rejects the username/password provided, the local password database is checked.

Correct answer: A, B

Explanation

Option A is correct because the configuration specifies that the local user database is checked when the TACACS+ server is not available. Option B is also correct as it states that if the TACACS+ server is available but rejects the credentials, access is denied. Options C and D are incorrect because C suggests complete denial of access without checking the local database, and D inaccurately states that the local database is checked after TACACS+ rejection.