MCQ: What does "Security Misconfiguration" refer to in web security?

• A. A security approach that relies on keeping vulnerabilities secret
• B. A vulnerability resulting from improper security settings and configurations
• C. An attack that allows unauthorized access to restricted directories
• D. A method to prevent SQL Injection attacks