nerdexam
EC-Council

312-50V11 · Question #284

An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?

The correct answer is D. Covert. A covert channel is an unauthorized communication path that exploits system resources in unintended ways to secretly transfer information.

System Hacking

Question

An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?

Options

  • AClassified
  • BOvert
  • CEncrypted
  • DCovert

How the community answered

(42 responses)
  • A
    2% (1)
  • B
    5% (2)
  • D
    93% (39)

Why each option

A covert channel is an unauthorized communication path that exploits system resources in unintended ways to secretly transfer information.

AClassified

'Classified' refers to an information sensitivity or clearance level, not a type of communication channel used within an operating system.

BOvert

An overt channel is a legitimate, authorized, and intended communication path - the direct opposite of what is described in the question.

CEncrypted

An encrypted channel is a designed and intended communication mechanism that uses encryption to protect data; it is an authorized channel, not one that bypasses intended system design.

DCovertCorrect

A covert channel uses shared system mechanisms - such as storage (file timestamps, free disk space) or timing (CPU usage patterns) - in ways that were never designed or intended for communication, allowing an attacker to exfiltrate data while bypassing security controls. These channels are dangerous precisely because they exploit legitimate OS features in illegitimate ways, making them difficult to detect with standard monitoring.

Concept tested: Covert channel communication exploiting unintended OS paths

Source: https://csrc.nist.gov/glossary/term/covert_channel

Topics

#covert channel#information hiding#OS communication#data exfiltration

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice