JAVA/Sun Exam Questions

Why is this possible?

A site security policy dictates that the root account is never permitted to remotely log in to a system. A root shell should only be obtained through the use of the su(1) command.

The security administrator sets the CONSOLE parameter in the /etc/default/login file. The administrator then attempts to remotely access the system using the Solaris Secure Shell as the root account and surprisingly is able to log in. Why is this possible?

A.
DenyRootLogin is set to No in /etc/ssh/sshd_config.

B.
AdmitRootLogin is set to Yes in /etc/ssh/sshd_config.

C.
AllowRootLogin is set to Yes in /etc/ssh/sshd_config.

D.
EnableRootLogin is set to Yes in /etc/ssh/sshd_config.

E.
PermitRootLogin is set to Yes in /etc/ssh/sshd_config.