312-50V10 · Question #270
One way to defeat a multi-level security solution is to leak data via
The correct answer is C. a covert channel.. Covert channels allow data to be exfiltrated through unintended communication pathways, bypassing the mandatory access controls enforced by multi-level security systems.
Question
One way to defeat a multi-level security solution is to leak data via
Options
- Aa bypass regulator.
- Bsteganography.
- Ca covert channel.
- Dasymmetric routing.
How the community answered
(37 responses)- A3% (1)
- B11% (4)
- C81% (30)
- D5% (2)
Why each option
Covert channels allow data to be exfiltrated through unintended communication pathways, bypassing the mandatory access controls enforced by multi-level security systems.
A 'bypass regulator' is not a recognized term in information security and does not describe any known technique for defeating multi-level security solutions.
Steganography conceals the existence of data within carrier media but does not by itself create a pathway that circumvents the mandatory access controls enforced by an MLS system.
A covert channel is a communication path not designed for information transfer that allows a process to move data in a way that violates a system's security policy. In multi-level security environments, covert channels - whether storage-based or timing-based - can transfer data across security domain boundaries without being detected or blocked by mandatory access controls, effectively defeating the MLS model.
Asymmetric routing is a network condition where traffic takes different paths in each direction - it is a routing anomaly unrelated to bypassing multi-level security access controls.
Concept tested: Covert channels defeating multi-level security
Source: https://csrc.nist.gov/glossary/term/covert_channel
Topics
Community Discussion
No community discussion yet for this question.