LFCA: Linux Foundation Certified IT AssociateDemo

By Linux Foundation · Question Mode

QuestionQ36

Security Fundamentals

Which of the following is a best practice for hardening SSHD?

  • A Using portknocking to protect ssh access for root
  • B Completely disabling ssh access
  • C Disabling ssh access for root
  • D Renaming root to a random name
Explanation

Disabling direct SSH access for the root account reduces exposure of the system’s most privileged account and supports accountability through individual user logins followed by controlled privilege escalation. OpenSSH provides the PermitRootLogin no setting to prevent root from logging in through SSH.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!