nerdexam
EC-Council

312-50V9 · Question #603

In Trojan terminology, what is a covert channel?

The correct answer is A. A channel that transfers information within a computer system or network in a way that violates the. A covert channel is a communication path that transfers information in violation of a system's security policy. It is used by Trojans and malware to exfiltrate data without detection.

Malware Threats

Question

In Trojan terminology, what is a covert channel?

Exhibit

312-50V9 question #603 exhibit

Options

  • AA channel that transfers information within a computer system or network in a way that violates the
  • BA legitimate communication path within a computer system or network for transfer of data
  • CIt is a kernel operation that hides boot processes and services to mask detection
  • DIt is Reverse tunneling technique that uses HTTPS protocol instead of HTTP protocol to establish

How the community answered

(51 responses)
  • A
    94% (48)
  • B
    4% (2)
  • D
    2% (1)

Why each option

A covert channel is a communication path that transfers information in violation of a system's security policy. It is used by Trojans and malware to exfiltrate data without detection.

AA channel that transfers information within a computer system or network in a way that violates theCorrect

A covert channel exploits mechanisms not intended for communication to transfer information in a way that bypasses the enforced security policy of a system or network. Trojans frequently use covert channels to send stolen data out of a network without triggering security controls, leveraging protocols or timing signals not monitored by defenses.

BA legitimate communication path within a computer system or network for transfer of data

A legitimate communication path describes an overt or authorized channel, which is the opposite of a covert channel by definition.

CIt is a kernel operation that hides boot processes and services to mask detection

Hiding boot processes and services describes rootkit behavior, specifically kernel-level process hiding, not a covert channel.

DIt is Reverse tunneling technique that uses HTTPS protocol instead of HTTP protocol to establish

Reverse tunneling over HTTPS describes a specific evasion technique, but is not the general definition of a covert channel in Trojan terminology.

Concept tested: Covert channel definition in Trojan and malware context

Source: https://csrc.nist.gov/glossary/term/covert_channel

Topics

#covert channel#Trojan#data exfiltration#steganography

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 312-50V9 Practice