OWASP 2017 Java Sensitive data exposure

What are the HTTP parameters necessary to upload a file

parameters are path,file

for the next question to you need to prepare URL like below, basically they want to understand how a hacker will gain access to unauthorized file

 <targetserver>?file=web.xml&path=../WEB-INF/

Once you run above URL in the browser you will get /var/lib/tomcat9 as response