The setting that the drop-in overrides
sshd_config on edge-02 says passwords are off, yet password logins work. Find the drop-in that wins, the effective value, and the root login setting.
Briefing
An auditor reports that edge-02 accepts SSH passwords. The administrator points at sshd_config, which clearly says PasswordAuthentication no.
sshd uses the first value it reads for most options. The Include line at the top of sshd_config is read before anything below it. sshd -T prints the configuration sshd will actually use.
edge-02 · SSH brute force
Type help for the command list and objectives for your tasks. Everything runs in this browser.
Up and down arrows walk your history. Ctrl+L clears the screen. Try help, ls, and objectives.