🛡️ Free practice test question from: SSH credentials leak (Security+)

B) If you accidentally type your password as the username directly in the SSH command (e.g., ssh password@host), this command can be stored in your shell's history file (like .bash_history). This means your password is exposed on the client machine.

C) The server you're trying to connect to will log authentication attempts. If you enter an incorrect username (which is actually your password), this attempted username will be recorded in the server's authentication logs (such as /var/log/auth.log on many Unix/Linux systems).

A) is incorrect because, while SSH encrypts the data transmitted between the client and server, it doesn't prevent the password from being logged in other places like shell history or server logs.

Therefore, both B and C are potential places where your password could be exposed.