Which of the following is a valid use case for sending data in HTTP request headers rather than the request body?

• A.Authentication tokens (Authorization header), API keys (X-API-Key), request tracing IDs (X-Request-ID), and idempotency keys - small metadata that needs to be processed before the body is read
• B.Large file uploads (PDF or ZIP content), long form posts, JSON with many nested objects, and bulk imports - data that exceeds the size limit of the URL line and benefits from header compression in HTTP/2
• C.Passwords (login credentials), credit card numbers (card data), medical records, and private messages - data that benefits from the header encryption that HTTP/2 applies to each request separately from the body
• D.Search queries (user-typed text), file contents (uploaded images), form fields, and CSV rows - data that the server reads before it chooses the handler that receives the request from the router of the framework