Configuration Panel PBQs: CompTIA Linux+ (XK0-006)

You are a Linux system administrator responsible for hardening the SSH daemon on a newly provisioned Ubuntu Server 'app-build-01' that will be used as a CI/CD build server. The server currently has SSH configured with insecure defaults including root login enabled, password authentication allowed, and an unrestricted listen address. Harden the SSH configuration to meet the corporate security baseline before the server is placed on the production network.