JN0-106 User Interfaces Practice Question
What permission bit must be included in a custom login class to allow a user to execute the ping command?
⚠ Common exam trap
Many exam-takers assume 'view' or 'control' permissions are sufficient for basic troubleshooting commands, but Junos requires the specific 'network' permission bit for any command that sends or receives network traffic.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
network
Network. In Junos, the 'network' permission bit controls access to network diagnostic commands such as ping, traceroute, and ssh. Without this permission, a user cannot execute these commands even if they have other permissions like view or control.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
view
Why it's wrong here
The 'view' permission grants read-only access to the configuration and the ability to execute most show commands, but it does not include the operational network diagnostics such as ping or traceroute. Those commands are gated by the 'network' permission, which is not implied by 'view'. Therefore, a login class that only includes 'view' cannot perform ping, making it incorrect for this requirement.
- ✗
control
Why it's wrong here
The 'control' permission is designed for modifying the configuration hierarchy, including statements that change system behavior. It does not cover the execution of network troubleshooting utilities like ping or traceroute, which require the 'network' permission. Consequently, even though 'control' provides significant configuration power, it is insufficient for running ping without adding 'network'.
- ✗
system
Why it's wrong here
The 'system' permission is intended for administrative tasks such as managing processes, mounting filesystems, and performing system-level operations like reboot. However, it does not include the network-specific commands needed for connectivity checks; ping and traceroute are categorized under the 'network' permission. Thus, a custom class with 'system' alone cannot execute ping, as it lacks the required permission bit.
- ✓
network
Why this is correct
The 'network' permission is the specific permission bit that enables users to run network diagnostic tools, including ping, traceroute, and similar utilities. Without this bit, these commands are not available even if other permissions are present. Therefore, to create a custom login class that can ping, you must include the 'network' permission.
Go deeper
Related to this question
About these practice questions
This JN0-106 question is part of Courseiva's 326-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This JN0-106 practice question is part of Courseiva's free Juniper Networks certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the JN0-106 exam.