Myrcella has been hired to perform an audit of a security incident where a large corporation was using an open-source application that they had deployed to a cloud service provider. The application was used to manage the many people whose information it tracked and included a lot of identifying information about them that could be used in identity fraud. Unfortunately, the person that installed the application never removed the default administrative account that was still using the default password. Which of the following describes this scenario?
A) Weak or obsolete security technologies
B) Unencrypted data and unencrypted communications
C) Insufficient security controls
D) Incorrect hardening settings

Question

Quizplus · Accepted Answer

The scenario describes a failure to change default settings, which is an example of incorrect hardening settings.

Myrcella Has Been Hired to Perform an Audit of a Security