nerdexam
CompTIA

XK0-004 · Question #317

A systems administrator is attempting to access a server by SSH. The Linux administrator ensures that the SSH keys on the remote server were unable to connect. The following error message is being…

The correct answer is A. Password. When SSH key-based authentication fails, the user account password may need to be corrected or reset to allow password-based SSH authentication as a fallback.

Troubleshooting and Diagnostics

Question

A systems administrator is attempting to access a server by SSH. The Linux administrator ensures that the SSH keys on the remote server were unable to connect. The following error message is being displayed:

Which of the following needs to be changed on order for the administrator to access the server via SSH?

Exhibit

XK0-004 question #317 exhibit

Options

  • APassword
  • BSSL
  • CSELinux
  • DOpenSSH

How the community answered

(58 responses)
  • A
    76% (44)
  • B
    3% (2)
  • C
    7% (4)
  • D
    14% (8)

Why each option

When SSH key-based authentication fails, the user account password may need to be corrected or reset to allow password-based SSH authentication as a fallback.

APasswordCorrect

SSH supports multiple authentication methods, including public key and password-based authentication. If the SSH keys on the remote server are not working, the administrator can fall back to password authentication - but this requires the account password to be valid, unexpired, and not locked. Changing or resetting the password resolves authentication failures when key-based auth is unavailable or misconfigured.

BSSL

SSL is not part of the SSH protocol stack; SSH uses its own key exchange and transport encryption independently of SSL/TLS certificates, so SSL has no bearing on this SSH connection failure.

CSELinux

SELinux enforces mandatory access control and can block SSH in certain contexts, but its denials appear as AVC denial log entries and a 'Permission denied' error, not as an SSH key authentication failure.

DOpenSSH

OpenSSH is the underlying SSH implementation already in use; reconfiguring or reinstalling OpenSSH would not resolve an authentication failure caused by invalid or missing credentials.

Concept tested: SSH password authentication fallback when keys fail

Source: https://www.ssh.com/academy/ssh/public-key-authentication

Topics

#SSH authentication#troubleshooting SSH#key-based auth#access control

Community Discussion

No community discussion yet for this question.

Full XK0-004 Practice