CompTIA Security+ (SY0-701) SY0-701 — Question 420

A security administrator observed the following in a web server log while investigating an incident: "GET ../../../../etc/passwd" Which of the following attacks did the security administrator most likely see?