Study. uk . com
  1. Home
  2. All questions
  3. Question 159

CompTIA Security+ study material · question 159 of 611

Which two findings fall under security misconfiguration? Choose two.

  1. A session identifier that is never rotated
  2. Default accounts left enabled
  3. Verbose error pages exposed in production
  4. A SQL query built by string concatenation
Show the answer

Answer: B. Default accounts left enabled
C. Verbose error pages exposed in production

Misconfiguration is a flaw of omission. Concatenated SQL is injection and a static session identifier is an authentication failure.

Source: OWASP Top 10 (OWASP) — OWASP Top Ten › Security Misconfiguration

Challenge yourself on this topic → Study as cards