LFCS User and Group Management Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Generate SSH key pair using ssh-keygen, then copy the public key to the remote server using ssh-copy-id, then set correct permissions on the remote server (chmod 700 ~/.ssh and chmod 600 ~/.ssh/authorized_keys), then test the SSH login without a password prompt.

  Why this is correct

  This order ensures that the keys are created first, then securely copied, permissions are locked down to prevent unauthorized access, and finally the setup is verified. It follows standard security practices.

• ✗

  Copy the public key to the remote server using ssh-copy-id first, then generate the SSH key pair, then set permissions, then test login.

  Why it's wrong here

  This is incorrect because you cannot copy a key that hasn't been generated yet. The key pair must be created before the public key can be transferred.

• ✗

  Generate SSH key pair, then set permissions on the remote server, then test login, then copy the public key.

  Why it's wrong here

  This is incorrect because testing login before copying the public key will fail, and setting permissions on the remote server before copying the key is pointless as the authorized_keys file doesn't exist yet.

• ✗

  Generate SSH key pair, then set permissions on the local machine, then copy the public key to the remote server, then test login.

  Why it's wrong here

  This is incorrect because setting permissions on the local machine is unnecessary for SSH key-based authentication; the permissions that matter are on the remote server's ~/.ssh directory and authorized_keys file.

Go deeper

Related to this question