Which of the following best describes a security misconfiguration?

$1.$

Security misconfiguration are mistakes employees make while using the web, checking their email, or even within their physical environment.

$2.$

Security misconfigurations are errors that occur when security settings are not configured or implemented properly.

$3.$

Security misconfigurations are errors that allow the adversary to utilize implants or other vulnerabilities inserted prior to installation in order to infiltrate data, or manipulate information technology hardware, software, operating systems, peripherals, etc.

$4.$

Security misconfigurations are defects in software that could allow an attacker to gain control of a system.