Which item is NOT among the common defaults or misconfigurations attackers look for?

• A. Default credentials
• B. Open admin interfaces
• C. Outdated software
• D. Strong, unique passwords

Answer: (D)

Attackers target easy footholds created by default settings and misconfigurations. Default credentials are a common trap because devices and apps often ship with predictable usernames and passwords, and many admins never change them. Open admin interfaces become risky when management portals are exposed without proper access controls, letting unauthorized users reach sensitive controls. Outdated software is especially dangerous since it often has known, exploitable vulnerabilities that attackers can easily weaponize. In contrast, strong, unique passwords are a defensive measure; they reduce the likelihood of password-based breaches and are not something attackers typically look for as a vulnerability. So the item describing strong, unique passwords isn’t a vulnerability attackers exploit—it's actually a safeguard.