In auditing a web server, an IS auditor should be concerned about the risk of individuals gaining unauthorized access to confidential information through: 
A、common gateway interface (CGI) scripts. 
B、enterprise java beans (EJBs). 
C、applets. 
D、web services.