Which of the following outcomes of manually inspecting web links indicates the highest risk and should be prioritized for further investigation during a penetration testing engagement?
Uncovering personal data that appears to be used for test purposes in the development version of the site.
Finding several web links that are mislabeled leading to pages with different content than expected.
Discovery of server-side scripts that are not executed but can be downloaded through a web link.
Discovery of backup files containing source code and database credentials left in a directory accessible through a web link.