LPI Exam Questions

Which configuration option can you use to prevent the root user from logging directly onto a machine

Which configuration option can you use to prevent the root user from logging directly onto a machine using ssh?

A.
NoRootLogon

B.
PermitRootLogin No

C.
NoRootLogon Yes

D.
RootLogin = No

E.
ProhibitRootLogon No

Explanation:
Fom the man pages:
sshd(8) reads configuration data from /etc/ssh/sshd_config (or the file specified with -f on the command line). The file contains keyword-argument pairs, one per line. Lines starting with # and empty lines are interpreted as comments. Arguments may optionally be enclosed in double quotes (") in order to represent arguments containing spaces.

PermitRootLogin Specifies whether root can log in using ssh(1). The argument must be yes, without-password, forced-commands-only, or no. The default is yes.