Which concealment techniques are used for hiding data exfiltration?

• A. DNS tunneling, steganography, or HTTPS
• B. VPN tunneling, TLS
• C. Steganography alone
• D. HTTPS alone

Answer: (A)

Concealing data exfiltration relies on covert channels that blend with normal traffic or hide inside other data, making the outbound data harder to spot. DNS tunneling uses the DNS system itself to carry encoded data in queries and responses, taking advantage of how DNS is often allowed through networks and not deeply inspected. Steganography hides information inside other files or media, such as images or audio, so the exfiltrated data rides along in content that looks legitimate. HTTPS hides the payload inside an encrypted TLS channel, so the content is unreadable to network monitors while the connection appears as normal web traffic.

These methods cover different vectors—protocol-level covert channels, hidden payloads in media, and encrypted transport—giving a broader set of concealment tactics for exfiltration. The other options are narrower or mix in techniques that aren’t as directly about concealment in the exfiltration context.