nerdexam
CompTIA

LX0-104 · Question #16

What is a purpose of an SSH host key?

The correct answer is B. It provides the server's identity information to connecting SSH clients.. An SSH host key serves to authenticate the identity of the SSH server to the connecting client, preventing man-in-the-middle attacks.

Security

Question

What is a purpose of an SSH host key?

Options

  • AIt must be sent by any SSH client in addition to a user key in order to identify the client's host.
  • BIt provides the server's identity information to connecting SSH clients.
  • CIt is the root key by which all user SSH keys must be signed.
  • DIt authenticates any user that logs into a remote machine from the key's host.
  • EIt is used by system services like cron, syslog or a backup job to automatically connect to remote

How the community answered

(24 responses)
  • A
    8% (2)
  • B
    88% (21)
  • E
    4% (1)

Why each option

An SSH host key serves to authenticate the identity of the SSH server to the connecting client, preventing man-in-the-middle attacks.

AIt must be sent by any SSH client in addition to a user key in order to identify the client's host.

SSH host keys are for server identification, not client identification, and are distinct from user keys used for client authentication.

BIt provides the server's identity information to connecting SSH clients.Correct

When an SSH client connects to a server, the server presents its host key. The client then verifies this key against its `known_hosts` file to ensure it is connecting to the legitimate server and not an impostor, thereby confirming the server's identity. This crucial step protects against potential man-in-the-middle attacks by ensuring the authenticity of the remote host.

CIt is the root key by which all user SSH keys must be signed.

SSH host keys are for server authentication, not for signing user SSH keys; user keys are typically standalone or managed by separate certificate authorities.

DIt authenticates any user that logs into a remote machine from the key's host.

Host keys authenticate the server, not the user; user authentication is handled by user credentials or user keys.

EIt is used by system services like cron, syslog or a backup job to automatically connect to remote

While SSH can be used for automated connections, host keys are fundamentally for server identity verification, not specifically for services like cron or syslog to connect automatically, although they are part of the overall secure connection.

Concept tested: SSH host key purpose

Source: https://man7.org/linux/man-pages/man8/sshd.8.html

Topics

#SSH security#host keys#authentication#man-in-the-middle

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full LX0-104 Practice