QuestionQ36Verified/Security FundamentalsCopy linkReport a problemAsk AstroTutorSave questionWhich of the following is a best practice for hardening SSHD?AUsing portknocking to protect ssh access for rootBCompletely disabling ssh accessCDisabling ssh access for rootDRenaming root to a random nameShow AnswerAnswerExplanationDisabling direct SSH access for the root account reduces exposure of the system’s most privileged account and supports accountability through individual user logins followed by controlled privilege escalation. OpenSSH provides the PermitRootLogin no setting to prevent root from logging in through SSH.Learn moreOpenSSH sshd_config manual — PermitRootLoginShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion