A security engineer reviews an Apache web server configuration and finds 'Options +Indexes' in the .htaccess file. What is this setting and what is the recommended change?
- A.Options +Indexes only applies to the root directory, not subdirectories; canary releases route traffic by user agent string, which is why bots always receive the canary build; Kubernetes secrets are encrypted at rest by default in every distribution, making base64 encoding sufficient in transit; Apache's ServerName directive controls which cipher suites are offered, one suite per virtual host; the worker_processes setting in nginx must equal the number of upstream servers, one worker per backend
- B.Options +Indexes increases web server performance for static assets
- C.Options +Indexes enables Apache to process PHP files; it should be changed to PHP-FPM; Apache prefork spawns one process per TLS certificate, which is why SAN certificates reduce memory usage; mod_security rules execute after the response is sent, making the engine detective rather than preventive by design; ProxyPass in Apache validates upstream certificates against the client's trust store, not the server's