JNCIA-Junos: Juniper Networks Certified Associate – Junos (2024) — Question 2

You configured your system authentication order using the set authentication-order tacplus radius password command.
Which statement is correct in this scenario?

Answer options

• A. A rejection by TACACS+ will prevent a login and bypass the other two authentication methods.
• B. The password authentication will only be used if the TACACS+ and RADIUS servers fail to respond.
• C. All authentication methods are used with the most restrictive permission set used.
• D. The password authentication method is evaluated if the TACACS+ and RADIUS servers respond with a reject message.

Correct answer: B

Explanation

The correct answer is B because the password authentication method comes into play only when both TACACS+ and RADIUS fail to respond, ensuring that the more secure methods are prioritized first. Options A and D are incorrect as they misrepresent how rejections affect login attempts, and option C incorrectly implies that all methods are applied simultaneously with restrictive permissions.