What constitutes the GREATEST exposure during a database server audit?

What constitutes the GREATEST exposure during a database server audit?

• A. The administrator account password does not expire.
• B. Default global security settings remain unchanged.
• C. Old data have not been purged.
• D. Database activity is not fully logged.

Answer: (B)

The greatest exposure during a database server audit is represented by the fact that default global security settings remain unchanged. This situation poses a significant risk because default settings are often well-known and documented, making them easier targets for attackers. When organizations fail to modify these settings, they might inadvertently leave their systems vulnerable to unauthorized access or exploitation. Default settings often do not adhere to the specific security policies required for an organization, and they may include general permissions that grant unnecessary access to users or applications that should be restricted. This lack of customization and security hardening can result in significant security gaps, allowing for easier entry points for threats. While the other choices highlight important security aspects, the unchanged global security settings represent a fundamental oversight that can lead to widespread vulnerabilities across the database environment. In a security audit, particularly focused on risk exposure, the failure to address default configurations generally indicates a lack of due diligence in securing the database, making this the greatest exposure.

The greatest exposure during a database server audit is represented by the fact that default global security settings remain unchanged. This situation poses a significant risk because default settings are often well-known and documented, making them easier targets for attackers. When organizations fail to modify these settings, they might inadvertently leave their systems vulnerable to unauthorized access or exploitation.

Default settings often do not adhere to the specific security policies required for an organization, and they may include general permissions that grant unnecessary access to users or applications that should be restricted. This lack of customization and security hardening can result in significant security gaps, allowing for easier entry points for threats.

While the other choices highlight important security aspects, the unchanged global security settings represent a fundamental oversight that can lead to widespread vulnerabilities across the database environment. In a security audit, particularly focused on risk exposure, the failure to address default configurations generally indicates a lack of due diligence in securing the database, making this the greatest exposure.