nerdexam
IBM

000-221 · Question #165

What is the purpose of using the ssh-keygen -t dsa command?

The correct answer is A. Establishing credentials for a secure connection between systems. The ssh-keygen -t dsa command generates a DSA public/private key pair used to establish passwordless, cryptographically authenticated SSH connections between systems.

Security

Question

What is the purpose of using the ssh-keygen -t dsa command?

Options

  • AEstablishing credentials for a secure connection between systems.
  • BProvide performance monitoring agents to monitor encrypted file systems.
  • CAllow a user to switch to the root user without knowing the root password.
  • DSecurely transfer files between AIX instances without a password prompt using ftp

How the community answered

(22 responses)
  • A
    82% (18)
  • B
    5% (1)
  • C
    9% (2)
  • D
    5% (1)

Why each option

The ssh-keygen -t dsa command generates a DSA public/private key pair used to establish passwordless, cryptographically authenticated SSH connections between systems.

AEstablishing credentials for a secure connection between systems.Correct

ssh-keygen -t dsa creates a DSA (Digital Signature Algorithm) key pair - a private key stored locally and a public key distributed to target systems. Once the public key is placed in the remote system's authorized_keys file, SSH uses the key pair to authenticate the user without a password, establishing secure credentials for the connection.

BProvide performance monitoring agents to monitor encrypted file systems.

ssh-keygen is an authentication key generation tool and has no function related to performance monitoring agents or encrypted file system access.

CAllow a user to switch to the root user without knowing the root password.

Switching to the root user is accomplished via su or sudo; ssh-keygen generates authentication keys and does not grant privilege escalation.

DSecurely transfer files between AIX instances without a password prompt using ftp

Secure file transfer uses sftp or scp, not ftp; while key-based auth enables passwordless transfers, ssh-keygen itself generates the key pair rather than configuring any file transfer protocol.

Concept tested: SSH key pair generation for passwordless authentication

Source: https://www.ibm.com/docs/en/aix/7.3?topic=s-ssh-keygen-command

Topics

#ssh-keygen#DSA key#SSH authentication#key generation

Community Discussion

No community discussion yet for this question.

Full 000-221 Practice