nerdexam
CompTIA

CV0-002 · Question #491

Joe, a cloud administrator, is no longer able to SSH to his cloud management console after he returns from a two-week vacation. A coworker was able to connect from the management station with no issue

The correct answer is D. Ensure the management console is configured with the correct host key.. Joe's inability to SSH after a machine replacement, while a coworker can connect, points to an issue with Joe's specific machine's SSH client configuration.

Troubleshooting

Question

Joe, a cloud administrator, is no longer able to SSH to his cloud management console after he returns from a two-week vacation. A coworker was able to connect from the management station with no issue. During the last two weeks, the desktop team replaced all administrator machines with newer ones. Which of the following must Joe do FIRST to troubleshoot his access?

Options

  • ARename the SSH key folder on his machine to keys_allow.
  • BEnsure he has the same host key as his coworker.
  • CEnsure his host is configured to use the correct load balancer.
  • DEnsure the management console is configured with the correct host key.

How the community answered

(26 responses)
  • A
    19% (5)
  • B
    31% (8)
  • C
    8% (2)
  • D
    42% (11)

Why each option

Joe's inability to SSH after a machine replacement, while a coworker can connect, points to an issue with Joe's specific machine's SSH client configuration.

ARename the SSH key folder on his machine to keys_allow.

Renaming an SSH key folder to `keys_allow` is not a standard or valid SSH client configuration to resolve authentication issues.

BEnsure he has the same host key as his coworker.

SSH host keys are used by the client to verify the *server's* identity, not to compare with a coworker's key for authentication, nor is the coworker's key relevant to Joe's access.

CEnsure his host is configured to use the correct load balancer.

Since a coworker can successfully connect, the load balancer and network path to the management console are likely functioning correctly, making this an unlikely first troubleshooting step for Joe's specific problem.

DEnsure the management console is configured with the correct host key.Correct

Since Joe's machine was replaced and his coworker can connect, the management console's SSH server configuration is likely correct regarding accepted keys. Joe's new machine needs to be configured with the correct private SSH key (often referred to as 'host key' in a client-server context, referring to the client's key for authentication) that matches the public key authorized on the cloud management console for his user account. This ensures his client can authenticate successfully.

Concept tested: SSH client-server authentication troubleshooting

Source: https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh_keymanagement

Topics

#SSH access#Troubleshooting connectivity#Host key management#Client machine replacement

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice