A security audit identifies a number of large email messages being sent by a specific user
from their company email account to another address external to the company. These
messages were sent prior to a company data breach, which prompted the security audit. The
user was one of a few people who had access to the leaked data. Review of the suspect’s
emails show they consist mostly of pictures of the user at various locations during a recent
vacation. No suspicious activities from other users who have access to the data were
discovered. Which of the following is occurring?

A.
The user is encrypting the data in the outgoing messages.

B.
The user is using steganography.

C.
The user is spamming to obfuscate the activity.

D.
The user is using hashing to embed data in the emails.