Multiple choice

Which of the following is NOT a good Web security strategy?

  1. Restrict access to the Web server; keep a minimum number of ports open

  2. Limit the users who can load software, edit or add files

  3. Add demo programs, so that users can test system without accessing production data

  4. Remove unnecessary compilers and interpreters

  5. None of these

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Adding demo programs or test files to a production web server creates unnecessary attack surfaces and security vulnerabilities that unauthorized actors can exploit. Good web security practices require keeping servers minimal and free of unneeded code or demo tools.