Exam 312-96 topic 1 question 18 discussion

just goolged

The security risk described is that users can view the website structure and file names, which is commonly known as "Directory Listing." To mitigate this risk, directory listings should be disabled. The correct option to disable directory listings would be: D. <init-param> <param-name>listings</param-name> <param-value>false</param-value> </init-param> This setting will ensure that the server does not display a list of files in a directory when there is no default index file (like index.html or index.jsp). Note: The XML tags in the options provided seem to have typos like int-param and int param, which should ideally be init-param. So, Alice should use option D to mitigate the security risk of exposing directory listings to users.

I think the correct answer is D, because https://tomcat.apache.org/tomcat-9.0-doc/default-servlet.html