Exposed admin and backup paths

Can the scanner look for the usual doors: /admin, /wp-admin, /login, xmlrpc, source maps and leftover zip backups? We do not need an exploit. We need a list of what answers.