Which of the following actions applies to a Risk Level of 3 Medium?

A.
Potentially not business related

B.
Can cause data leakage or malware infection without user knowledge

C.
Can be misused and cause data leakage or malware infection

D.
Can bypass security or hide identities