Which statement best describes a typical consequence of a security misconfiguration?

Which statement best describes a typical consequence of a security misconfiguration?

• A. Configure all security mechanisms.
• B. Failure to configure all security mechanisms.
• C. Regular patching reduces misconfigurations.
• D. Monitoring logs prevents misconfigurations.

Answer: (B)

When security controls aren’t fully or correctly set up, gaps appear in the protection layer. A typical consequence of a security misconfiguration is failing to configure all security mechanisms, leaving weaknesses such as default settings, weak access controls, unpatched services, or unnecessary open ports that attackers can exploit. This broad exposure is what makes misconfigurations such a common attack vector. The other statements describe actions that would reduce risk or prevent misconfigurations (configuring all mechanisms, regular patching, monitoring logs), rather than the typical outcome when a misconfiguration occurs.

When security controls aren’t fully or correctly set up, gaps appear in the protection layer. A typical consequence of a security misconfiguration is failing to configure all security mechanisms, leaving weaknesses such as default settings, weak access controls, unpatched services, or unnecessary open ports that attackers can exploit. This broad exposure is what makes misconfigurations such a common attack vector.

The other statements describe actions that would reduce risk or prevent misconfigurations (configuring all mechanisms, regular patching, monitoring logs), rather than the typical outcome when a misconfiguration occurs.