312-50V11 · Question #686
In Trojan terminology, what is a covert channel?
The correct answer is A. A channel that transfers information within a computer system or network in a way that violates. A covert channel is a communication path that transfers data in violation of a system's security policy, often used by Trojans to exfiltrate information without detection.
Question
In Trojan terminology, what is a covert channel?
Exhibit
Options
- AA channel that transfers information within a computer system or network in a way that violates
- BA legitimate communication path within a computer system or network for transfer of data
- CIt is a kernel operation that hides boot processes and services to mask detection
- DIt is Reverse tunneling technique that uses HTTPS protocol instead of HTTP protocol to establish
How the community answered
(34 responses)- A91% (31)
- C3% (1)
- D6% (2)
Why each option
A covert channel is a communication path that transfers data in violation of a system's security policy, often used by Trojans to exfiltrate information without detection.
A covert channel is formally defined as any communication mechanism that transfers information in a way that violates the established security policy of a system or network. Trojans leverage covert channels to communicate with command-and-control servers or exfiltrate data outside of monitored, authorized paths, bypassing access controls.
This describes a legitimate (overt) communication channel, which is the opposite of a covert channel.
This describes rootkit behavior - specifically kernel-level process and service hiding - not the definition of a covert channel.
This describes a reverse HTTP/HTTPS tunneling technique, which is one specific implementation tool, not the definition of a covert channel.
Concept tested: Covert channel definition in Trojan attacks
Source: https://csrc.nist.gov/glossary/term/covert_channel
Topics
Community Discussion
No community discussion yet for this question.