If you login to a new Drupal site and check your Status report screen, you may see this warning:

The directory sites/default is not protected from modifications and poses a security risk. You must change the directory's permissions to be non-writable. The file sites/default/settings.php is not protected from modifications and poses a security risk. You must change the file's permissions to be non-writable.

In this video from our Drupal Security class, Robert is going to show you how to fix this warning: