[Reference: CompTIA PenTest+ PT0-003 Official Study Guide - "Directory Traversal Attacks", Incorrect options:, Option A (Insecure Direct Object Reference - IDOR): IDOR exploits direct access to objects (e.g., changing user_id=123 to user_id=456), not directory navigation., Option B (CSRF): CSRF forces users to execute unwanted actions, unrelated to directory access., Option D (Local File Inclusion - LFI): LFI involves including local files (e.g., executing PHP scripts), but this attack only reads a file., ]