Question 80
Original unofficial RHEL 10 RHCSA skill-check scenario: An engineer copies a private SSH key into a shared directory to simplify a deployment. Which ongoing practice best prevents a recurrence?
Explanation
Correct Answer
In this RHEL 10 system administration case: An engineer copies a private SSH key into a shared directory to simplify a deployment. Underlying reason: A private authentication credential must remain confidential to its holder. The most direct, approved resolution is: Move the private key to an account-controlled secure location and use correct restrictive access instead of sharing it. Confirm it by checking: The authorized owner can authenticate while other users cannot read the private key. Sustain the fix by: Audit private-key distribution and rotation for automation accounts. This is the INTENDED response for the best ongoing operational safeguard. It is a knowledge-check explanation, not a verified hands-on Red Hat exam answer;
Incorrect Answers
Track approved host-key rotation and rebuild notices. That is not sufficient for the reported RHEL task, because a private authentication credential must remain confidential to its holder.
Require documented reference checks for unfamiliar destructive commands. That is not sufficient for the reported RHEL task, because a private authentication credential must remain confidential to its holder.
Use explicit path allowlists for destructive maintenance. That is not sufficient for the reported RHEL task, because a private authentication credential must remain confidential to its holder.