312-50V9 · Question #57
An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?
The correct answer is D. Covert. A covert channel is a communication pathway that exploits system resources in ways that were never designed or intended for data transfer. It allows information to be exfiltrated or communicated outside of normal, authorized channels.
Question
An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?
Options
- AClassified
- BOvert
- CEncrypted
- DCovert
How the community answered
(48 responses)- A6% (3)
- B4% (2)
- C2% (1)
- D88% (42)
Why each option
A covert channel is a communication pathway that exploits system resources in ways that were never designed or intended for data transfer. It allows information to be exfiltrated or communicated outside of normal, authorized channels.
Classified refers to a data sensitivity or clearance level assigned to information, not a type of unintended communication channel within an OS.
An overt channel is the opposite - it is an open, visible, and intended communication channel that is authorized and designed for transferring information.
Encrypted describes a method of securing data in transit or at rest using cryptographic algorithms, and does not define the nature or design intent of the communication channel itself.
A covert channel is specifically defined as a communication channel that allows a process to transfer information in a manner that violates the system's security policy and that was not designed for communication. Covert channels can be storage-based (writing to shared resources) or timing-based (manipulating timing of operations). This definition precisely matches the scenario of using an unintended OS communication pathway to transfer information.
Concept tested: Covert channel definition in OS security contexts
Source: https://csrc.nist.gov/glossary/term/covert_channel
Topics
Community Discussion
No community discussion yet for this question.