Which of the Following Controls in a Computerized Consumer Loan

Which of the following controls in a computerized consumer loan system of a major bank would be the least effective in detecting a fraudulent loan?

A) All log-in accounts become inaccessible after three incorrect password attempts.
B) Loan approvals over a pre-determined limit must have management approval.
C) Customer information is matched to payment data prior to funds disbursement.
D) System controls prevent supervisors from delegating their approval authority during vacation periods.