正解:A
The correct answer is A because data exfiltration means the unauthorized extraction, transfer, or removal of data from a target system, network, database, cloud storage, or endpoint. In CEH system hacking and post- exploitation concepts, after an attacker gains access and possibly escalates privileges, the attacker may attempt to access protected resources and quietly extract sensitive data. The retrieved guide material describes exfiltration as a phase where an attacker with elevated or unrestricted access can access protected resources and "quietly extract data," modify or delete sensitive files, or obtain configuration information. Therefore, the keyword that best matches data exfiltration is "extraction." Option B, deletion, means removing data. Option C, encryption, means converting readable data into ciphertext, commonly seen in ransomware. Option D, corruption, means damaging or altering data so it becomes unreliable or unusable. These actions may occur during attacks, but they do not define exfiltration.