Using a directory traversal exploit to extract files through a vulnerable web server, what sensitive files might be worth initially targeting? $($select all that apply$)$

configuration files

the backup files of SAM and SYSTEM

fiels with hashed passwords that are also encrypted

the file with a Windows bootkey