A university hosts their public facing website on a Linux server. To administer this server which has a command line interface, they use a program known as Secure Shell $($SSH$).$ Through SSH clients the university administrators connect to the SSH service running onthe Linux server for any administration activities.

After few months, their server was hacked and investigations revealed that the attackers first gained access to the server from the Internet through SSH$,$ because SSH service was unintentionally exposed to the Internet.

Choose the best option below which describes this situation.

SSH services unintentionally exposed to Internet is a security misconfiguration problem.

The university failed to dispose its data securely by doing media sanitization

The university failed to conduct security coding training to the programmers of the website.

Secure code review or SAST could have prevented this issue.