Please answer this

Please explain the answer with example. 1. One of the topics this week is on security misconfiguration. What are some of the examples of configuring a device in an insecure manner (don't use my example in the lecture). 2. Sensitive data exposure is one of the most important parts of application security and our primary objective is to protect sensitive data where it resides in systems. Why do you think this is a hard problem to solve