Myrcella Has Been Hired to Perform an Audit of a Security

Multiple Choice

Myrcella has been hired to perform an audit of a security incident where a large corporation was using an open-source application that they had deployed to a cloud service provider. The application was used to manage the many people whose information it tracked and included a lot of identifying information about them that could be used in identity fraud. Unfortunately, the person that installed the application never removed the default administrative account that was still using the default password. Which of the following describes this scenario?

A) Weak or obsolete security technologies
B) Unencrypted data and unencrypted communications
C) Insufficient security controls
D) Incorrect hardening settings