Enabling "Cluster Lockdown" in Nutanix is the best security measure to prevent password-based SSH logins.
* Option C (Enable Cluster Lockdown) is correct:
* Cluster Lockdowndisables password-based SSHandrequires key-based authentication.
* Option A (Rename the nutanix user) is incorrect:
* The Nutanix useris a system accountand cannot be renamed.
* Option B (Block port 22) is incorrect:
* This wouldprevent all SSH connections, includingkey-based logins, making administration difficult.
* Option D (Delete the nutanix user) is incorrect:
* Thenutanix useris required for system operations and cannot be removed.
References:
* Nutanix Security Guide #Implementing Cluster Lockdown
* Nutanix KB #Best Practices for SSH Security on CVMs