Nutanix Certified Associate Practice Exam

How can an administrator disable password authentication over SSH in a secure Nutanix environment?

1. Enable Cluster Lockdown in Prism

2. Change the SSH configuration file

3. Set firewall rules to restrict SSH

4. Update user permissions

The correct answer is: Enable Cluster Lockdown in Prism

To disable password authentication over SSH in a secure Nutanix environment, enabling Cluster Lockdown in Prism is the correct approach. When Cluster Lockdown is activated, it enhances the security posture of the cluster by limiting administrative access and enforcing stricter authentication methods. This feature can involve configuring the system to only allow specific types of authentication methods, such as SSH keys, while disallowing password-based access, thus reducing the risk associated with password vulnerabilities. In contrast, changing the SSH configuration file might provide options for adjusting authentication methods, but it may not be as effective in a Nutanix environment if Cluster Lockdown is not enabled, as this could lead to misconfigurations or oversight within the broader security framework. Setting firewall rules to restrict SSH can help manage access but does not directly impact the authentication mechanism itself. Updating user permissions might be necessary for overall access control but does not specifically address the method of authentication used for SSH. In summary, enabling Cluster Lockdown is the most comprehensive and secure method to disable password authentication over SSH, especially within the context of a Nutanix environment, providing a well-rounded security approach.