A municipal database administration UI similar to phpMyAdmin is reachable without MFA and with broad network access. What is the correct finding emphasis?
Select an answer to reveal the explanation.
Short Explanation
The control panel for the filing cabinets is not a tourist attraction. DB admin UIs can read, change, or wipe the data store — treat them like vault doors. Obscure hostnames and shared proxies are not MFA.
Full Explanation
Database administration consoles provide powerful access to data and structure, making them high-value targets. They should sit behind strong authentication (preferably MFA), tight network allowlists, and monitoring. Obscurity or fronting with a reverse proxy does not replace those controls. Understating their value leads to weak remediation priorities.