CompTIA · Linux+ XK0-006
Remote access and account hardening
Linux+ XK0-006 · Lesson 17 of 28 · 2:12:21
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the Linux+ XK0-006 exam (CompTIA Linux+ V8). In this lesson: SSH keys and ssh-agent, sshd_config hardening, tunnels and chrooted SFTP, fail2ban, password policies with PAM (pam_pwquality, pam_pwhistory, pam_faillock), MFA, restricted shells, and system hardening, with Pinecrest Media, a fictional video streaming company, as the running example. Includes three original practice questions.
Preview the topics
- Root must never sign in over SSH, and only members of the ops group may sign in at all. Which two lines fit?
- Partners upload videos by SFTP. They must see only their own folder, and they must get no shell. Which settings fit?
- An admin wants a list of every setuid program on a server, to remove the bit from those that do not need it. Which command fits?