A website currently allows a user to download the website’s backup file stored in one of the hidden folders due to vulnerability. In this context which of the following could be associated with it?

Exposing backup files in hidden directories is a misconfiguration vulnerability. Proper configuration management should restrict access or move sensitive files outside web root. Input validation (A) checks user data, not file exposure. Error handling (C) manages exceptions, and DoS (D) concerns availability attacks. The issue stems from improper server/file system configuration.