Which of the following operations can improve the security of cloud server accounts? (Multiple choice)

Question

Options

• AUse the root user to remotely log in to the cloud server through SSH
• BLog in to the cloud server with a key pair
• CSet a complex password for the cloud server
• DTurn on the two-factor authentication function of enterprise host security, and perform secondary

• A
  31% (18)
• B
  69% (41)

Explanation

Options B, C, and D are correct because they each add a meaningful layer of protection to cloud server accounts: key pair authentication replaces vulnerable password-based SSH logins with cryptographic credentials that are nearly impossible to brute-force; complex passwords resist dictionary and brute-force attacks when passwords must be used; and two-factor authentication (2FA) ensures that even a stolen password alone cannot grant access, requiring a second verification step.

Option A is wrong because logging in as the root user over SSH is a major security risk - root has unrestricted system privileges, so a single compromised session gives an attacker complete control. Best practice is to disable root SSH login entirely and use a least-privilege account instead.

Memory tip: Think of security in layers - something you have (key pair), something you know (complex password), and something that confirms it is really you (2FA). Root SSH login breaks the first rule of privilege management, so it is always the wrong answer on security questions.

No community discussion yet for this question.