312-50V10 · Question #284
An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?
The correct answer is D. Covert. A covert channel is a communication path that was not designed or intended to transfer information, used to exfiltrate data while bypassing security controls.
Question
An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?
Options
- AClassified
- BOvert
- CEncrypted
- DCovert
How the community answered
(15 responses)- B7% (1)
- D93% (14)
Why each option
A covert channel is a communication path that was not designed or intended to transfer information, used to exfiltrate data while bypassing security controls.
Classified describes the sensitivity level of information, not the nature of the communication channel itself.
An overt channel is a legitimate, authorized, and designed communication pathway, the opposite of what the question describes.
Encrypted describes the protection method applied to data in transit, not whether the channel itself was intended to exist.
A covert channel exploits mechanisms within a system - such as timing, resource usage, or storage - that were never designed for inter-process communication. Because these channels are unintended and typically unmonitored, attackers use them to exfiltrate data without triggering normal security controls.
Concept tested: Covert channel definition in information security
Source: https://csrc.nist.gov/glossary/term/covert_channel
Topics
Community Discussion
No community discussion yet for this question.