The Apache AllowOverride directive should be configured appropriately for web site root directories.
(1) AuthConfig / FileInfo / Indexes / Limit / Options / All / None
(1) Apache configuration file: AllowOverride directive
L1 15. Directory Functionality/Features Directives p24
1.8 Directory Functionality Control with the Options Directive p17
CIS Apache Benchmark for Unix v1.7 For Apache Versions 1.3 and 2.0
CIS
2007-07-01
Version 1.7
Prose (PDF)
Security Configuration Benchmark For Apache Web Server
CIS
2008-11-01
Version 2.2.0
Prose (PDF)