As part of a college project, you have set up a web server for hosting your team's application. Given your interest in cybersecurity, you have taken the lead in securing the server. You are aware…

Question

Options

• APerforming regular server configuration audits
• BEnabling multi-factor authentication for users
• CImplementing a firewall to filter traffic
• DRegularly backing up server data

• A
  74% (17)
• B
  17% (4)
• C
  4% (1)
• D
  4% (1)

Explanation

Explanation

Regular server configuration audits (Option A) directly address misconfiguration-based attacks by systematically reviewing server settings, identifying vulnerabilities such as default credentials, unnecessary open ports, or improper permissions, and correcting them before attackers can exploit them - making it the most targeted defense against this specific threat vector.

Why the distractors are incorrect:

• Option B (MFA) strengthens user authentication but does nothing to address underlying server misconfigurations that attackers could exploit without needing credentials at all.
• Option C (Firewall) filters incoming/outgoing traffic and can block some attacks, but it doesn't identify or fix the root cause - the misconfiguration itself.
• Option D (Data backups) is a recovery strategy, not a prevention strategy, and offers no protection against misconfigurations being exploited in the first place.

Memory Tip: Think of it this way - to fight misconfiguration attacks, you must check the configuration. Match the solution to the threat: audits = finding bad settings = fixing misconfigurations. If the question mentions a specific attack type, your answer should directly address that type.

No community discussion yet for this question.