When I see in stapp01 server , Already the PermitRootlogin is commented ‘#’ in sshd_config, not sure what else i need to do there …I was failed , and review also confirming that …still not sure 
You need to uncomment that section and change it to PermitRootlogin no
By default it is yes even though it is commented.
Agree!, thanks for clearing this … my head is back in the game… , Cheers!!! 