nerdexam
EC-Council

312-50V9 · Question #476

A covert channel is a channel that

The correct answer is A. transfers information over, within a computer system, or network that is outside of the security. A covert channel is a communication path that was not designed for communication and circumvents the system's security policy to transfer information.

System Hacking

Question

A covert channel is a channel that

Options

  • Atransfers information over, within a computer system, or network that is outside of the security
  • Btransfers information over, within a computer system, or network that is within the security policy.
  • Ctransfers information via a communication path within a computer system, or network for transfer
  • Dtransfers information over, within a computer system, or network that is encrypted.

How the community answered

(19 responses)
  • A
    84% (16)
  • B
    5% (1)
  • D
    11% (2)

Why each option

A covert channel is a communication path that was not designed for communication and circumvents the system's security policy to transfer information.

Atransfers information over, within a computer system, or network that is outside of the securityCorrect

A covert channel is defined as a method of transferring information through a channel that operates outside the bounds of the established security policy, exploiting mechanisms not intended for communication - such as shared resources, timing, or storage. Because it bypasses policy controls, it can be used to leak sensitive data without detection by conventional security mechanisms.

Btransfers information over, within a computer system, or network that is within the security policy.

A channel that operates within the security policy is a legitimate, authorized communication path, which is the opposite of a covert channel by definition.

Ctransfers information via a communication path within a computer system, or network for transfer

This choice describes a generic communication path and omits the critical element that a covert channel specifically violates or circumvents security policy.

Dtransfers information over, within a computer system, or network that is encrypted.

Encryption describes a method of protecting data confidentiality on any channel; an encrypted channel can still be fully authorized and within policy, so encryption alone does not define a covert channel.

Concept tested: Covert channel definition and security policy bypass

Source: https://csrc.nist.gov/glossary/term/covert_channel

Topics

#covert channel#security policy#information transfer#steganography

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice