The Order directive for all DocumentRoot directives should be configured appropriately.
(1) Allow,Deny / Deny,Allow / Mutual-failure
(1) Apache configuration file: Order directive (in DocumentRoot Directory directive)
1.7 Restricting Access p15
Security Configuration Benchmark For Apache Web Server
CIS
2008-11-01
Version 2.2.0
Prose (PDF)