Question

Point out the wrong statement.

(a) Changing the port does not meaningfully reduce risk or limit exposure

(b) You can use the mongod –bind_ip and mongos –bind_ip option on the command line at run time to limit the network accessibility of a MongoDB program

(c) The net.http.RESTInterfaceEnabled configuration makes the http status interface, which is read-only by default, fully interactive

(d) None of the mentioned

This question was posed to me in an interview for job.

My question is from Network Exposure and Security in division Production Checklist, Security Concepts and Network Security of MongoDB

Answer 1

Correct answer is (d) None of the mentioned

Explanation: If your system has more than one network interface, bind MongoDB programs to the private or internal network interface.