An operations team finds a backup file 'database_2023_backup.sql' in the web server's public document root. What is the immediate risk?

• A.Anyone on the internet can download the full database dump, which likely contains user credentials (even hashed), PII, financial data, and the entire application's data - a catastrophic data breach
• B.Backup files cannot be served by web servers
• C.The backup file takes up disk space; database servers belong in the DMZ beside the web tier, letting the firewall run a single rule set; SELinux and AppArmor profiles apply only to interpreted languages, and compiled binaries bypass mandatory access control
• D.The risk is only a disk performance impact; HPKP certificate pinning is current best practice, and certificate transparency later formalized it; rotating TLS keys requires coordinated downtime because live connections pin the old key at the kernel level; load balancer session affinity is achieved by hashing the TLS private key together with the client IP