Which two login-class permissions could permit a user to view the system hierarchy of the active configuration? (Choose two)
A.
system permision
B.
view-configuration permission
C.
network permission
D.
super-user permission
Which two login-class permissions could permit a user to view the system hierarchy of the active configuration? (Choose two)
Which two login-class permissions could permit a user to view the system hierarchy of the active configuration? (Choose two)
A.
system permision
B.
view-configuration permission
C.
network permission
D.
super-user permission
I believe the correct answer to this question would be A & B. The system permission would allow the user to see only the system portion of the configuration. B would allow the user to view the entire configuration, which includes the system portion.
super-user isn’t really a permission, but a predefined login class that includes the predefined “all” permission.
Any ideas?
Ref:
http://cygnus.cc.ncu.edu.tw/netflow/juniper/swconfig-system-basics/sys-mgmt-access3.html
http://fengnet.com/book/Junos.Cookbook/junosckbk-CHP-2-SECT-10.html
Agree: A,B
I would think “system permission” and obviously “super-user”. Why system permission?
http://www.juniper.net/techpubs/software/junos-es/junos-es92/junos-es-admin-guide/login-classes.html#table-login-classes
At the end it near the “permission bits” it lists “system” as ”
Can view system-level information in configuration and operational modes.”
I believe A and B are correct one:
root@JuniperOlive1# set system login class test permissions view-configuration permissions system
super-user is a class and network permission is not useful in this case
Passed the exam and the I didn’t have a 100% soooo it’s very possible It’s view-configuration permission as the second one.
“You can make use of the view-configuration permission category, which is set as a base for permissions, for the custom login class and then deny individual commands from the set; which are not required using regular expression”
http://kb.juniper.net/InfoCenter/index?page=content&id=KB23038&actp=RSS
Passed wiht 90%, so there is room for error.
Maybe view-configuration permission is the correct one?
http://kb.juniper.net/InfoCenter/index?page=content&id=KB23038&actp=RSS
“You can make use of the view-configuration permission category, which is set as a base for permissions, for the custom login class and then deny individual commands from the set; which are not required using regular expression.”
Happy to you …
Regarding this reference
http://www.juniper.net/techpubs/software/junos-es/junos-es92/junos-es-admin-guide/login-classes.html#table-login-classes
the answer would be
A.
system permission
D.
super-user permission
even there is no system login-class but found as permission but no view-configuration class or permission
A and B.
http://www.juniper.net/techpubs/en_US/junos11.4/topics/concept/access-privileges-levels-overview.html#jd0e581
Look at the very bottom of the list. It is hard to find the specific information you need sometimes on Juniper website, even they have lots of information.
Until today, I did not know of a view-configuration. I always thought the action-control gave the view.