Which is part of a time of check, time of use (TOCTOU) attack?

A.
guessing a user password through automated tools or brute force methods

B.
supplying a specially crafted argument list to the ffbconfig(1M) command

C.
modifying a user’s shell initialization files to add /var/tmp/…/bin directory to their PATH parameter

D.
creating a symbolic link in the /tmp file system to exploit a race condition causing the /.rhosts file to be overwritten