CCSP · Question #612
Which of the following threat types can occur when baselines are not appropriately applied or when unauthorized changes are made?
The correct answer is A. Security misconfiguration. Security misconfiguration occurs when systems, applications, or infrastructure are not configured according to established security baselines, or when unauthorized or unapproved changes alter a previously secure configuration. This includes leaving default credentials in place…
Question
Which of the following threat types can occur when baselines are not appropriately applied or when unauthorized changes are made?
Options
- ASecurity misconfiguration
- BInsecure direct object references
- CUnvalidated redirects and forwards
- DSensitive data exposure
How the community answered
(42 responses)- A90% (38)
- B5% (2)
- C2% (1)
- D2% (1)
Explanation
Security misconfiguration occurs when systems, applications, or infrastructure are not configured according to established security baselines, or when unauthorized or unapproved changes alter a previously secure configuration. This includes leaving default credentials in place, enabling unnecessary services, or improperly setting permissions. Insecure direct object references (B) involve exposing internal implementation objects to users. Unvalidated redirects and forwards (C) involve sending users to unintended URLs. Sensitive data exposure (D) involves inadequate protection of critical data, which can be a consequence of misconfiguration but is a separate threat category.
Topics
Community Discussion
No community discussion yet for this question.