Which two security threats would you prioritize in your audit?

You are conducting a security audit for a web application that uses URL rewriting. The
application does not allow for user-generated content and is accessible only via secured
VPN. Which two security threats would you prioritize in your audit?

A.
Session hijacking

B.
Denial-of-service attacks

C.
Cross-site scripting

D.
SQL injection

E.
Parameter-site manipulating