Which of the following presents the GREATEST threat to the security of an enterprise resource
planning (ERP) system?

A.
User ad hoc reporting is not logged

B.
Network traffic is through a single switch

C.
Operating system (OS) security patches have not been applied

D.
Database security defaults to ERP settings

Explanation:

The fact that operating system (OS) security patches have not been applied is a serious
weakness. Routing network traffic through a single switch is not unusual. Although the lack of
logging for user ad hoc reporting is not necessarily good, it does not represent as serious a
security- weakness as the failure to install security patches. Database security defaulting to the
ERP system’s settings is not as significant.