Most Efficient Sensitive-File Exfiltration Method
Short answer
D Encrypt the sensitive file and transmit it over HTTPS for fast, protected exfiltration.
Question
Key Takeaways
It tests objective 5.3 — choosing an exfiltration channel by throughput and detectability, with the trap that stealthier channels like dnscat DNS tunneling are far slower, not more efficient.
This PT0-003 scenario tests exfiltration channel efficiency, and the answer is D: encrypting the file and sending it over HTTPS gives high-throughput, reliable, low-noise transfer.
Common mistake: Option C, splitting the file into tiny pieces over dnscat, is the tempting pick because DNS tunneling evades firewalls, but DNS payloads are minuscule and need reassembly, making it the least efficient choice.
Expert Analysis
The Governing Principle
The CompTIA PT0-003 exfiltration doctrine (objective 5.3, staging and exfiltration) judges a channel on throughput, reliability and how much it stands out on the wire. The word "efficient" in the stem is the deciding constraint: the winning method must move the whole file quickly, intact and without requiring unusual encoding work.
Applying It to the Options
- Option D — encrypt and send over HTTPS is correct. TLS over TCP port 443 delivers full-bandwidth, connection-oriented, guaranteed-delivery transfer that blends into normal browsing traffic, so no extra concealment or reassembly is needed. Encryption also satisfies the "could be sensitive" requirement by protecting the file in transit.
- Option C — split into tiny pieces over dnscat is the classic trap. DNS tunneling is stealthy and often slips past egress filters, but DNS packets carry only tiny payloads, so throughput is extremely low and the transfer requires custom splitting and reassembly — precise and reliable, but the opposite of efficient.
- Option A — steganography over FTP adds encoding overhead and uses cleartext FTP, which is easily sniffed and flagged; hiding the payload costs bandwidth and time.
- Option B — compress and send via TFTP uses UDP with no delivery guarantee and a trivially detectable unauthenticated protocol, so the file may need retransmission.
Why the Comments Converge
Community reasoning echoes this: one note stresses that HTTPS protects data in transit with TLS and, unlike DNS tunneling or steganography, needs no unusual encoding, fragmentation or concealment; another flags that "efficient" is the operative adjective. Both land on D, and the official logic of the exfiltration domain agrees.
Exam Strategy
On efficiency-worded exfiltration questions, rank each channel by throughput and delivery guarantee before considering stealth: connection-oriented protocols over common ports beat tunneling and covert channels. Treat fragmentation, encoding and reassembly steps as efficiency penalties, and reserve low-and-slow DNS or steganographic methods for questions that explicitly ask for stealth or evasion.
Frequently Asked Questions
Why is HTTPS exfiltration more efficient than DNS tunneling with dnscat?
Does encrypting the file before sending it over HTTPS matter?
When would steganography or TFTP be a better choice than HTTPS?
Community Votes
74% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 2 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 2
-
leesuh 👍 2 Answered DA. Steganography over FTP ❌ • Steganography hides data inside images or media. • FTP is unencrypted → can be detected/sniffed. • Less efficient and more detectable. B. Compress file and use TFTP ❌ • TFTP is unencrypted and connectionless, very easy to detect, and doesn’t guarantee delivery. C. Split file and send over dnscat ❌ • dnscat uses DNS tunneling, can bypass some firewalls. • Splitting files into tiny pieces is slow and inefficient, especially for large files. D. Encrypt and send over HTTPS ✅ • HTTPS is encrypted, reliable, and allowed through most firewalls. • Encrypting the file adds an extra layer of security. • Efficient: sends the file in one piece over a standard protocol.
-
sneeed 👍 1 Answered DPay attention to the adjective, 'efficient'. Correct answer: D. Encrypt and send the file over HTTPS. HTTPS uses TLS to protect data during transmission. Unlike DNS tunneling or steganography, it doesn't require unusual encoding, fragmentation, or concealment techniques.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All PT0-003 Questions
Access 120 questions with complete answers and detailed explanations.
View Full PT0-003 Practice Test →