sudo sshd -T | grep -iE 'permitrootlogin|passwordauthentication|pubkeyauthentication'

sshd -T dumps the effective configuration the daemon would actually use, merging the main file and all drop-in fragments under /etc/ssh/sshd_config.d/. Grepping the three auth directives confirms what the server will really enforce — essential because later files can override earlier ones. Compare this output with your intended settings.