What is the main objective of directory traversal in web application attacks?

Group of answer choices

To gain unauthorized access to files outside a web server's root directory

To manipulate the logic of an XML$-$based application

To intercept or modify messages exchanged between a web browser and server

To exploit vulnerabilities in an application's API