Role-Based Access Control (RBAC) JN0-481 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is a recommended best practice when managing roles and permissions in Juniper Apstra?

   • AAssign permissions directly to users instead of roles
   • BRegularly review and audit role assignments
   • CDisable all external authentication to avoid security risks
   • DKeep all roles with global scope for maximum flexibility
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the result of assigning a user multiple roles in Juniper Apstra?

   • AThe user is locked out until a single role is chosen
   • BThe user only receives permissions from the first role assigned
   • CThe user receives the union of permissions from all assigned roles
   • DThe user receives permissions from the last role assigned only
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   An organization uses both LDAP and TACACS+ for authentication across different systems. They want to integrate Juniper Apstra with LDAP for user authentication and role assignment based on group membership, but they also need to support a few users who authenticate via TACACS+. What is the recommended approach?

   • AUse only TACACS+ for authentication and manually assign roles to all users
   • BConfigure TACACS+ as the primary authentication source and LDAP for role mapping
   • CUse only LDAP for authentication and manually create TACACS+ users in Apstra
   • DConfigure LDAP as the primary authentication source and TACACS+ as a fallback, with role mapping for LDAP groups
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   When creating a custom role in Juniper Apstra, what must you define?

   • AThe specific permissions the role will have
   • BThe external authentication source for the role
   • CThe network devices the role can manage
   • DA list of users to assign the role to
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What does the 'blueprint' permission scope control in Juniper Apstra?

   • AAccess to individual devices only
   • BAccess to user management
   • CAccess to a specific blueprint and its resources
   • DAccess to all system settings
   Reveal Solution Discussion Select an answer first