Which statement is true about using custom login class permissions?

Which statement is true about using custom login class permissions?
A . If you allow and deny the same command, the command is denied.
B . If you allow and deny the same command, Junos OS will randomly choose the action.
C . If you allow and deny the same command, the command is allowed.
D . If you allow and deny the same command, the Junos OS will fail the commit check.

View Answer

Answer: C

Explanation:

Understanding the Allow and Deny Statement Precedence and Matching By default, the allow-commands and allow-configuration regular expressions take precedence over deny-commands and deny-configuration expresssions. Thus, if you configure the same command for both the allow-commands and deny-commands statements, then the allow operation takes precedence over the deny operation.

Ref: User Access Privileges | Junos OS | Juniper Networks

“User Access Privileges

…

Understanding the Allow and Deny Statement Precedence and Matching

By default, the allow-commands and allow-configuration regular expressions take precedence over deny-commands and deny-configuration expresssions. Thus, if you configure the same command for both the allow-commands and deny-commands statements, then the allow operation takes precedence over the deny operation.

..,.”