312-50V9 · Question #476
A covert channel is a channel that
The correct answer is A. transfers information over, within a computer system, or network that is outside of the security. A covert channel is a communication path that was not designed for communication and circumvents the system's security policy to transfer information.
Question
A covert channel is a channel that
Options
- Atransfers information over, within a computer system, or network that is outside of the security
- Btransfers information over, within a computer system, or network that is within the security policy.
- Ctransfers information via a communication path within a computer system, or network for transfer
- Dtransfers information over, within a computer system, or network that is encrypted.
How the community answered
(19 responses)- A84% (16)
- B5% (1)
- D11% (2)
Why each option
A covert channel is a communication path that was not designed for communication and circumvents the system's security policy to transfer information.
A covert channel is defined as a method of transferring information through a channel that operates outside the bounds of the established security policy, exploiting mechanisms not intended for communication - such as shared resources, timing, or storage. Because it bypasses policy controls, it can be used to leak sensitive data without detection by conventional security mechanisms.
A channel that operates within the security policy is a legitimate, authorized communication path, which is the opposite of a covert channel by definition.
This choice describes a generic communication path and omits the critical element that a covert channel specifically violates or circumvents security policy.
Encryption describes a method of protecting data confidentiality on any channel; an encrypted channel can still be fully authorized and within policy, so encryption alone does not define a covert channel.
Concept tested: Covert channel definition and security policy bypass
Source: https://csrc.nist.gov/glossary/term/covert_channel
Topics
Community Discussion
No community discussion yet for this question.