thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

Security Misconfiguration

OWASP Top 10 category for insecure default, incomplete or ad hoc configurations across the application stack.

Definition

Examples include default accounts, unnecessary features or services, directory listing, verbose errors, missing security headers, permissive cloud storage and XXE-enabled parsers. Mitigations include repeatable hardened builds, minimal platforms, configuration review, automated configuration scanning and environment parity.

Example

An application server is deployed with its default admin console and password enabled.

Exam tip

Moved to A02 in the 2025 edition; automated hardening and IaC scanning are typical fixes.

Related terms