Which item is not listed among the OWASP Top Ten vulnerabilities as provided in the material?

• A. SQL Injection
• B. Injection
• C. Broken Authentication
• D. Insufficient Logging & Monitoring

Answer: (B)

The essential idea is that OWASP Top Ten uses broad vulnerability categories rather than listing every specific technique. Injection is one of those categories and it covers flaws where untrusted input is interpreted as part of a command or query. SQL injection is a well-known example of this kind of flaw, but it isn’t named as a separate entry in the Top Ten. It’s included under the Injection category. So, the item that isn’t listed as its own vulnerability in the material is SQL Injection because it’s encompassed by the broader Injection category. The other options correspond to separate entries that the Top Ten does list in various versions (for example, Broken Authentication, and Insufficient Logging & Monitoring), which is why they fit as distinct items.