Discuss CompTIA XK0-006 Exam Topic 4 Question 2

A Linux administrator attempts to log in to a server over SSH as root and receives the following error message: Permission denied, please try again. The administrator is able to log in to the console of the server directly with root and confirms the password is correct. The administrator reviews the configuration of the SSH service and gets the following output:

Based on the above output, which of the following will most likely allow the administrator to log in over SSH to the server?

ALog out other user sessions because only one is allowed at a time.

BEnable PAM and configure the SSH module.

CModify the SSH port to use 2222.

DUse a key to log in as root over SSH.

Suggested Answer: D

The SSH configuration option PermitRootLogin prohibit-password prevents the root user from logging in with password authentication. This setting means root cannot use a password to log in via SSH; only key-based authentication is permitted for root. The administrator can still log in as root locally, which is not affected by this SSH configuration. To allow SSH access as root, the administrator must use an SSH key instead of a password.

Other options:

A . MaxSessions controls the number of simultaneous SSH sessions but is not causing the login denial here.

B . PAM (Pluggable Authentication Modules) is disabled, but enabling it is not required for basic SSH authentication.

C . Changing the SSH port is unrelated to the authentication method issue.

CompTIA Linux+ Study Guide: Exam XK0-006, Sybex, Chapter 11: 'Securing Linux', Section: 'Securing SSH Access'

CompTIA Linux+ XK0-006 Objectives, Domain 3.0: Security

Get Premium XK0-006 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Craig 3 months ago

I’m not sure about PAM. Keys are definitely the way to go for SSH.

Isabella 3 months ago

I agree, but enabling PAM could help too. Option B might work.

Robt 3 months ago

I think option D is the best choice. Keys are more secure.

Willetta 3 months ago

I disagree, changing the port won't solve the permission issue.

Verda 3 months ago

Wait, can you really log in as root over SSH? Isn't that risky?

Lynelle 4 months ago

A is definitely not the issue, multiple sessions are allowed.

Clarence 5 months ago

I think B could work too, but not sure.

Shizue 5 months ago

D seems like the best option here.

Kenneth 6 months ago

I practiced a similar question where modifying SSH settings helped, but I can't remember if it was about PAM or something else.

Rosio 6 months ago

Using a key for SSH login sounds familiar, but I’m not confident if that’s the best option in this case.

Daniel 6 months ago

I think enabling PAM could be important, but I can't recall if it directly affects root logins over SSH.

Deeanna 7 months ago

I remember something about SSH configurations, but I’m not sure if changing the port is really the solution here.

CompTIA XK0-006 Exam - Topic 4 Question 2 Discussion