Which of following tasks can be performed when Nikto Web scanner is using a mutation technique? Each correct answer represents a complete solution. Choose all that apply.

Guessing for password file names is a documented Nikto mutation behavior that attempts to locate sensitive credential files by trying common naming patterns.

Sending mutation payloads for Trojan attacks is not a function of Nikto; Nikto is a web vulnerability scanner and does not deliver Trojan payloads.

Testing all files with all root directories is a core mutation technique that combines discovered files with every known root path to maximize coverage.

Enumerating user names via Apache leverages Apache-specific behaviors (such as mod_userdir) to identify valid system accounts, which is a recognized Nikto mutation capability.