A penetration tester wants to validate the effectiveness of a DLP product by attempting exfiltration of data using email attachments. Which of the following techniques should the tester select to…

Steganography involves hiding data within other files, which is a technique for covert exfiltration, but less specifically tied to 'metadata removal' as a test vector for DLP.

Removing metadata from files before sending them as email attachments can bypass DLP products that rely on specific metadata tags or properties for classification or content inspection. This technique changes the file's characteristics, potentially allowing sensitive content to slip past rules focused on specific metadata.

Encryption is a highly effective method to bypass content-based DLP as it makes the data unreadable, but it's a different mechanism than manipulating metadata.

Base64 encoding changes the data representation but does not inherently hide content from modern DLP solutions that are typically capable of decoding common encodings for inspection.