Question 110
Which change directly resolves the following NCP-AII scenario: An OS image for GPU nodes exposes unrestricted password SSH and lacks synchronized system logs after PXE provisioning?
Explanation
Correct Answer
The appropriate intervention is Apply baseline host hardening, SSH key policies, time synchronization and package controls before enrolling nodes. The defining technical dependency is that Operating-system installation should establish secure and traceable administration as well as a bootable host. Validate the correction by confirming that A provisioned node denies unapproved SSH and produces correctly timestamped authenticated logs.
Incorrect Answers
This option serves the scenario “A node boots from the wrong disk after BIOS reset and loses its approved cluster root filesystem image”. The appropriate intervention is Restore verified boot order and supported provisioning configuration, then validate local disk mapping. The present scenario is distinguished by “Apply baseline host hardening, SSH key policies, time synchronization and package controls before enrolling nodes”.
This response is applicable to a different failure: A compute fleet boots an OS image with a kernel version unsupported by the chosen GPU driver and fails after installation. Here the central dependency is that Operating-system installation should establish secure and traceable administration as well as a bootable host, so the specific response is Apply baseline host hardening, SSH key policies, time synchronization and package controls before enrolling nodes.
The related but distinct situation is “A Linux image is cloned with duplicate machine identities and static network parameters across otherwise identical GPU servers”. The appropriate intervention is Regenerate node-specific host keys, identity metadata and network configuration during provisioning. For the stated problem, “Apply baseline host hardening, SSH key policies, time synchronization and package controls before enrolling nodes” addresses the central condition.