A scoped web application returns a verbose error naming a database engine and internal path. What should the tester record?

1. The exposed information and how it may support later scoped analysis
2. A guarantee that all internal paths are remotely readable
3. A confirmed database takeover
4. A confirmed physical data-center compromise