CompTIA PenTest+ (PT0-002) — Question 60

A penetration tester wants to validate the effectiveness of a DLP product by attempting exfiltration of data using email attachments. Which of the following techniques should the tester select to accomplish this task?

Answer options

• A. Steganography
• B. Metadata removal
• C. Encryption
• D. Encode64

Correct answer: A

Explanation

Steganography is the correct technique because it allows data to be hidden within other files, making it less likely to be detected by DLP systems. The other options, such as Metadata removal and Encryption, may not effectively bypass DLP detection as they either alter the data in a detectable way or protect it without hiding it. Encode64 is simply a method of encoding data and does not inherently conceal it from DLP measures.