nerdexam
EC-Council

312-50V10 · Question #270

One way to defeat a multi-level security solution is to leak data via

The correct answer is C. a covert channel.. Covert channels allow data to be exfiltrated through unintended communication pathways, bypassing the mandatory access controls enforced by multi-level security systems.

System Hacking

Question

One way to defeat a multi-level security solution is to leak data via

Options

  • Aa bypass regulator.
  • Bsteganography.
  • Ca covert channel.
  • Dasymmetric routing.

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    11% (4)
  • C
    81% (30)
  • D
    5% (2)

Why each option

Covert channels allow data to be exfiltrated through unintended communication pathways, bypassing the mandatory access controls enforced by multi-level security systems.

Aa bypass regulator.

A 'bypass regulator' is not a recognized term in information security and does not describe any known technique for defeating multi-level security solutions.

Bsteganography.

Steganography conceals the existence of data within carrier media but does not by itself create a pathway that circumvents the mandatory access controls enforced by an MLS system.

Ca covert channel.Correct

A covert channel is a communication path not designed for information transfer that allows a process to move data in a way that violates a system's security policy. In multi-level security environments, covert channels - whether storage-based or timing-based - can transfer data across security domain boundaries without being detected or blocked by mandatory access controls, effectively defeating the MLS model.

Dasymmetric routing.

Asymmetric routing is a network condition where traffic takes different paths in each direction - it is a routing anomaly unrelated to bypassing multi-level security access controls.

Concept tested: Covert channels defeating multi-level security

Source: https://csrc.nist.gov/glossary/term/covert_channel

Topics

#covert channel#data exfiltration#multi-level security#security bypass

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice