During a testing engagement, a penetration tester compromises a host and locates data for exfiltration.

[Reference: CompTIA PenTest+ PT0-003 Official Study Guide - "Data Exfiltration Techniques", Encode the data as Base64 (Option E):, Base64 encoding disguises data by converting it into ASCII text, making it less likely to trigger DLP signature-based detection., Many DLP systems do not analyze encoded text deeply, assuming it is non-sensitive., Reference: CompTIA PenTest+ PT0-003 Official Study Guide - "Encoding and Obfuscation in Exfiltration", Incorrect options:, Option A (USB flash drive): Physical exfiltration is risky and easily detectable in enterprise environments., Option C (Rename file extensions): DLP systems analyze content, not just filenames., Option D (FTP for exfiltration): FTP is monitored by security tools and is a high-risk method., Option F (Trusted service): Many organizations monitor outbound traffic to cloud storage or email services., , ]