When an application is secure without having to change any default settings it is said to be what?

A. secure by design
B. secure by default
C secure by deployment
D. secure by reference

B
Explanation: Secure by default means that the application is secure without having to change any default settings. For example, some server products have certain capabilities (such as FTP) but those services require enabling to function so that the service is not available to a hacker. A product that requires the enabling of security functions is NOT secure by default.