You have been asked to configure a login class which will permit its users to view and edit the configuration. The class should only allow the configuration of the interfaces and firewall heirarchies. Which configuration correctly accomplishes this?（）

A router has been configured with the authentication order settings shown below:
[edit]
user@host# show system authentication-order authentication-order [radius tacplus password];
The router also has a local database that contains the user lab with password lab123. What would happen if both the RADIUS and the TACACS servers respond with a reject for user lab?（）