An Internal Staff Member Logs into an ERP Platform and Clicks

question 309

Multiple Choice

An internal staff member logs into an ERP platform and clicks on a record. The browser URL changes to: URL: http://192.168.0.100/ERP/accountId=5&action=SELECT Which of the following is the MOST likely vulnerability in this ERP platform?

• A) Brute forcing of account credentials
• B) Plan-text credentials transmitted over the Internet
• C) Insecure direct object reference
• D) SQL injection of ERP back end

---

Definitions:

Guided

Instructed or directed by someone with more knowledge or experience in a specific area.

Work Environment

The physical and psychological conditions under which employees perform their job duties.

False Positive Reaction

Occurs when a test or analysis incorrectly identifies the presence of a condition or attribute that is actually not present.

Dangerous

Involving potential harm or risk to safety, health, or well-being.