312-50V11 · Question #284
An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?
The correct answer is D. Covert. A covert channel is an unauthorized communication path that exploits system resources in unintended ways to secretly transfer information.
Question
An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?
Options
- AClassified
- BOvert
- CEncrypted
- DCovert
How the community answered
(42 responses)- A2% (1)
- B5% (2)
- D93% (39)
Why each option
A covert channel is an unauthorized communication path that exploits system resources in unintended ways to secretly transfer information.
'Classified' refers to an information sensitivity or clearance level, not a type of communication channel used within an operating system.
An overt channel is a legitimate, authorized, and intended communication path - the direct opposite of what is described in the question.
An encrypted channel is a designed and intended communication mechanism that uses encryption to protect data; it is an authorized channel, not one that bypasses intended system design.
A covert channel uses shared system mechanisms - such as storage (file timestamps, free disk space) or timing (CPU usage patterns) - in ways that were never designed or intended for communication, allowing an attacker to exfiltrate data while bypassing security controls. These channels are dangerous precisely because they exploit legitimate OS features in illegitimate ways, making them difficult to detect with standard monitoring.
Concept tested: Covert channel communication exploiting unintended OS paths
Source: https://csrc.nist.gov/glossary/term/covert_channel
Topics
Community Discussion
No community discussion yet for this question.