Hi aclarkvanmaur,
rstoney00 is right. My Suggestion is that you want to check that the default value 3 is not changed.
So if the command do not exist in your config then it is the default value. Otherwise you get a new line in your config like "ip ssh authentication-retries 2".
So you are able to create a compliance check.
Kind regards,
Flo