CV0-002 · Question #491
Joe, a cloud administrator, is no longer able to SSH to his cloud management console after he returns from a two-week vacation. A coworker was able to connect from the management station with no issue
The correct answer is D. Ensure the management console is configured with the correct host key.. Joe's inability to SSH after a machine replacement, while a coworker can connect, points to an issue with Joe's specific machine's SSH client configuration.
Question
Joe, a cloud administrator, is no longer able to SSH to his cloud management console after he returns from a two-week vacation. A coworker was able to connect from the management station with no issue. During the last two weeks, the desktop team replaced all administrator machines with newer ones. Which of the following must Joe do FIRST to troubleshoot his access?
Options
- ARename the SSH key folder on his machine to keys_allow.
- BEnsure he has the same host key as his coworker.
- CEnsure his host is configured to use the correct load balancer.
- DEnsure the management console is configured with the correct host key.
How the community answered
(26 responses)- A19% (5)
- B31% (8)
- C8% (2)
- D42% (11)
Why each option
Joe's inability to SSH after a machine replacement, while a coworker can connect, points to an issue with Joe's specific machine's SSH client configuration.
Renaming an SSH key folder to `keys_allow` is not a standard or valid SSH client configuration to resolve authentication issues.
SSH host keys are used by the client to verify the *server's* identity, not to compare with a coworker's key for authentication, nor is the coworker's key relevant to Joe's access.
Since a coworker can successfully connect, the load balancer and network path to the management console are likely functioning correctly, making this an unlikely first troubleshooting step for Joe's specific problem.
Since Joe's machine was replaced and his coworker can connect, the management console's SSH server configuration is likely correct regarding accepted keys. Joe's new machine needs to be configured with the correct private SSH key (often referred to as 'host key' in a client-server context, referring to the client's key for authentication) that matches the public key authorized on the cloud management console for his user account. This ensures his client can authenticate successfully.
Concept tested: SSH client-server authentication troubleshooting
Source: https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh_keymanagement
Topics
Community Discussion
No community discussion yet for this question.