Exam 312-50v13 topic 1 question 178 discussion

Choosing B) revealing SW versions... Also A) could be correct (not limiting login attempts so allowing bruteforce guessing credentials) but suggested solution “setup account lockout” is not the best one as legitimate user can be locked out by attackers. Instead, IP of the attacker should be blocked automatically after some count of attempts.

In your cybersecurity class, you are learning about common security risks associated with web servers. One topic that comes up is the risk posed by using default server settings. Why is using default settings on a web server considered a security risk, and what would be the best initial step to mitigate this risk? A. Default settings allow unlimited login attempts; setup account lockout B. Default settings reveal server software type; change these settings C. Default settings cause server malfunctions; simplify the settings D. Default settings enable auto-updates; disable and manually patch