Multiple choice technology security

Which of the following is true?

  1. Servers are generally configured in a secure manner when they are first installed

  2. It is impossible to securely configure a web server

  3. Out of the box settings normally meet what is called minimum baseline security standards

  4. The default settings on web servers are not generally secure

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Web server default settings prioritize ease of use and features over security. They often include unnecessary services, default credentials, verbose error messages, and known insecure configurations. Security requires explicit hardening: disabling unused modules, applying security patches, configuring encryption, and following security benchmarks.