What is the potential threat identified in this Stealthwatch dashboard?

Refer to the exhibit.

What is the potential threat identified in this Stealthwatch dashboard?
A . Host 10.201.3.149 is sending data to 152.46.6.91 using TCP/443.
B . Host 152.46.6.91 is being identified as a watchlist country for data transfer.
C . Traffic to 152.46.6.149 is being denied by an Advanced Network Control policy.
D . Host 10.201.3.149 is receiving almost 19 times more data than is being sent to host 152.46.6.91.

Answer: D