Which of the following is an example of session layer vulnerability?

• A. weak or non-existent mechanisms for authentication
• B. overloading of transport-layer mechanisms
• C. poor handling of unexpected input
• D. highly complex application security controls