I successfully completed the Disable Root Login challenge eventhough I could not verify that it was correct before I clicked Submit. Indeed after I uncommented and changed PermitRootLogin to no in /etc/ssh/sshd_config on stapp01 and restarted the service there, I tried to verify that this was correct by running ssh root@stapp01
. I expected to get outright Access Denied but I still got the password prompt.
Is there a better way to verify this?