Which statement is true about using custom login class permissions?

Which statement is true about using custom login class permissions?
A . If you allow and deny the same command, the command is denied.
B. If you allow and deny the same command, Junos OS will randomly choose the action.
C. If you allow and deny the same command, the command is allowed.
D. If you allow and deny the same command, the Junos OS will fail the commit check.

View Answer

Answer: C

Explanation:

Understanding the Allow and Deny Statement Precedence and Matching By default, the allow-commands and allow-configuration regular expressions take precedence over deny-commands and deny-configuration expresssions. Thus, if you configure the same command for both the allow-commands and deny-commands statements, then the allow operation takes precedence over the deny operation.

Ref: User Access Privileges | Junos OS | Juniper Networks

“User Access Privileges

…

Understanding the Allow and Deny Statement Precedence and Matching

By default, the allow-commands and allow-configuration regular expressions take precedence over deny-commands and deny-configuration expresssions. Thus, if you configure the same command for both the allow-commands and deny-commands statements, then the allow operation takes precedence over the deny operation.

..,.”