I am evaluating the use of drop-in configuration files for sshd via /etc/ssh/sshd_config.d/*.conf. However, I observed that OpenSCAP scans failed to recognize compliant values defined within these files. To verify the effective configuration, I have found that executing sshd -T provides a reliable method for auditing active parameter values.