CompTIA Server+ (SK0-005) Practice Exam

Disabling root login via SSH is a crucial step in securing remote management on a server. The root account has unrestricted access to all commands and files on the system, making it a prime target for attackers. By disabling root login, you force users to authenticate with a standard user account and then escalate privileges as needed. This adds an additional layer of security, as it limits direct access to the system's root privileges and makes it more challenging for unauthorized users to gain complete control over the server.

Utilizing secure protocols for access—such as SSH instead of unsecured options—also underscores the importance of safeguarding data transmitted between the server and management clients. Allowing all incoming traffic increases vulnerability to attacks, as it opens the door to potential threats from any source. Finally, setting weak passwords compromises security by making it easier for attackers to exploit the server, highlighting the importance of using strong, complex passwords to protect access.