CompTIA Linux+ XK0-006 (V8) Practice Question

The correct answer implements both security requirements. The PermitRootLogin no directive completely disables root login via SSH. The AllowGroups admins directive restricts SSH access to only users who are members of the admins group.

• The option using AllowUsers admins is incorrect because the AllowUsers directive expects a space-separated list of usernames, not group names.
• The option with PermitRootLogin prohibit-password is incorrect because this setting still allows root login using methods other than a password, such as public key authentication. The requirement is to disable direct root login completely.
• The option with RequireRootLogin no and PermitGroups admins is incorrect because these are not valid directives in the sshd_config file.