nerdexam
EC-Council

312-50V10 · Question #284

An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?

The correct answer is D. Covert. A covert channel is a communication path that was not designed or intended to transfer information, used to exfiltrate data while bypassing security controls.

System Hacking

Question

An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?

Options

  • AClassified
  • BOvert
  • CEncrypted
  • DCovert

How the community answered

(15 responses)
  • B
    7% (1)
  • D
    93% (14)

Why each option

A covert channel is a communication path that was not designed or intended to transfer information, used to exfiltrate data while bypassing security controls.

AClassified

Classified describes the sensitivity level of information, not the nature of the communication channel itself.

BOvert

An overt channel is a legitimate, authorized, and designed communication pathway, the opposite of what the question describes.

CEncrypted

Encrypted describes the protection method applied to data in transit, not whether the channel itself was intended to exist.

DCovertCorrect

A covert channel exploits mechanisms within a system - such as timing, resource usage, or storage - that were never designed for inter-process communication. Because these channels are unintended and typically unmonitored, attackers use them to exfiltrate data without triggering normal security controls.

Concept tested: Covert channel definition in information security

Source: https://csrc.nist.gov/glossary/term/covert_channel

Topics

#covert channel#information leakage#OS security#steganography

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice