Exam 312-50v12 topic 1 question 178 discussion

Actual exam question from ECCouncil's 312-50v12

Question #: 178
Topic #: 1

In your cybersecurity class, you are learning about common security risks associated with web servers. One topic that comes up is the risk posed by using default server settings. Why is using default settings on a web server considered a security risk, and what would be the best initial step to mitigate this risk?

A. Default settings allow unlimited login attempts; setup account lockout
B. Default settings reveal server software type; change these settings
C. Default settings cause server malfunctions; simplify the settings
D. Default settings enable auto-updates; disable and manually patch

Show Suggested Answer

Suggested Answer: B 🗳️

by DarioReymag at Feb. 6, 2024, 10:38 p.m.

Comments

Submit Cancel

LordXander

9 months ago

Selected Answer: B

B - because think of a default php.ini, mysql.conf and so on

upvoted 1 times

...

ryotan

10 months, 2 weeks ago

Why A was incorrect?

upvoted 2 times

brrbrr

10 months, 2 weeks ago

Option A suggests addressing the risk associated with default server settings by implementing an account lockout mechanism for unlimited login attempts. While implementing account lockout is a good security practice to protect against brute-force attacks, it may not directly address the broader issue of default settings on a web server.

upvoted 3 times

...

insaniunt

10 months, 3 weeks ago

Selected Answer: B

The best initial step to mitigate this risk is to: B. Default settings reveal server software type; change these settings

upvoted 3 times

...