Assuming that you are developing a Web Application called 'myApp'. You have a file called secret.txt which is part of the original Application, but you don't want your clients to gain access to it. What is the preferred way to do this?

Place the file 'secret.txt' in a directory called 'protected' in the 'myApp' Web Application.

Place the file 'secret.txt' in a directory called 'private' in the 'myApp' Web Application.

Place the file 'secret.txt' in a directory called 'WEB-INF' in the 'myApp' Web Application.

Any filename starting with 'secret' are usually not accessible by the Clients, so this file can be places anywhere in the Web Application.