Which statement is a characteristic of the broken access control threat to web applications?

Question:
Which statement is a characteristic of the broken access control threat to web applications?

• It allows attackers to access, and potentially change, serialized versions of data and objects.
• It allows an attacker to use the dynamic functions of a site to inject malicious content into the page.
• It allows users to circumvent existing authentication requirements.
• It allows attackers to steal sensitive information such as passwords or personal information.

Exam with this question: DevNet Associate (v1.0) – Module 6 Exam Answers