XK0-004 · Question #317
A systems administrator is attempting to access a server by SSH. The Linux administrator ensures that the SSH keys on the remote server were unable to connect. The following error message is being…
The correct answer is A. Password. When SSH key-based authentication fails, the user account password may need to be corrected or reset to allow password-based SSH authentication as a fallback.
Question
A systems administrator is attempting to access a server by SSH. The Linux administrator ensures that the SSH keys on the remote server were unable to connect. The following error message is being displayed:
Which of the following needs to be changed on order for the administrator to access the server via SSH?
Exhibit
Options
- APassword
- BSSL
- CSELinux
- DOpenSSH
How the community answered
(58 responses)- A76% (44)
- B3% (2)
- C7% (4)
- D14% (8)
Why each option
When SSH key-based authentication fails, the user account password may need to be corrected or reset to allow password-based SSH authentication as a fallback.
SSH supports multiple authentication methods, including public key and password-based authentication. If the SSH keys on the remote server are not working, the administrator can fall back to password authentication - but this requires the account password to be valid, unexpired, and not locked. Changing or resetting the password resolves authentication failures when key-based auth is unavailable or misconfigured.
SSL is not part of the SSH protocol stack; SSH uses its own key exchange and transport encryption independently of SSL/TLS certificates, so SSL has no bearing on this SSH connection failure.
SELinux enforces mandatory access control and can block SSH in certain contexts, but its denials appear as AVC denial log entries and a 'Permission denied' error, not as an SSH key authentication failure.
OpenSSH is the underlying SSH implementation already in use; reconfiguring or reinstalling OpenSSH would not resolve an authentication failure caused by invalid or missing credentials.
Concept tested: SSH password authentication fallback when keys fail
Source: https://www.ssh.com/academy/ssh/public-key-authentication
Topics
Community Discussion
No community discussion yet for this question.
