Which statement describes a recognized security risk with programs that adopt authority?

A.
Items in IFS directories can be altered.

B.
The users job will retain elevated authority when the program ends.

C.
If the program opens a command line, a user will have access to the system at elevated
authority.

D.
If the program calls another program, the called program cannot avoid running at elevated
authority.