SSH Quiz: Can You Master Keys, Config & Hardening?

1. What is SSH port forwarding used for?

Changing the SSH port number

Tunneling traffic through an encrypted SSH connection

Forwarding email securely

Routing packets between networks

2. Which SSH configuration prevents users from using empty passwords?

NoEmptyPasswords

PermitEmptyPasswords no

DisableBlank yes

AllowNull false

3. What is the function of the ssh-agent utility?

Manages SSH daemon processes

Stores and manages private keys in memory

Configures firewall rules

Monitors SSH connections

4. Which setting restricts SSH access to specific users only?

AllowUsers

PermitUsers

AuthorizedUsers

LimitUsers

5. What does the HostKey parameter in sshd_config specify?

The location of the server's private key file

The user's authorized public key

The client's private key

The encryption algorithm used

6. Which SSH option allows you to run commands on a remote host without an interactive shell?

Ssh -e

Ssh -c

Ssh -n

Ssh -x

7. What is the purpose of the SSH banner message?

To advertise the server version

To display a legal notice before login

To identify the network administrator

To count login attempts

8. Which command is used to copy files securely between hosts?

Ssh-copy

Sftp

Scp

Rssh

9. What does disabling password authentication in SSH accomplish?

Forces key-based authentication only, improving security

Prevents any remote access

Allows only local login

Encrypts all passwords

10. Which permission setting is correct for the ~/.ssh directory?

644

755

700

777

11. Which command generates an RSA key pair for SSH authentication?

Ssh-keygen -t rsa

Ssh-genkey -t rsa

Keygen-ssh -type rsa

Ssh-create -key rsa

12. Which SSH configuration option sets the maximum number of failed login attempts?

MaxAttempts

LoginRetries

MaxAuthTries

FailedLoginLimit

13. What command allows you to connect to a remote host using a specific private key?

Ssh -i /path/to/key user@host

Ssh -k /path/to/key user@host

Ssh -key /path/to/key user@host

Ssh --identity /path/to/key user@host

14. Which encryption algorithm is considered most secure for SSH key generation today?

DSA

RSA-1024

ED25519

ECDSA-256

15. What does the known_hosts file contain?

List of users allowed to connect

Public keys of remote hosts you have previously connected to

SSH server configuration settings

Backup copies of private keys

16. Which SSH configuration option disables root login?

PermitRootLogin no

DisableRoot yes

RootAccess deny

AllowRoot false

17. What is the primary advantage of public-key authentication over password authentication?

It is faster to type

It eliminates the need for passwords and reduces brute-force attack risk

It requires no encryption

It works on all operating systems

18. Which file stores the authorized public keys for SSH login?

~/.ssh/id_rsa

~/.ssh/authorized_keys

~/.ssh/known_hosts

~/.ssh/config

19. Where is the SSH server configuration file typically located on Linux?

/etc/ssh/ssh_config

/etc/ssh/sshd_config

/usr/ssh/config

/var/ssh/sshd_config

20. What is the default SSH port number?

20

22

2222

3389