CISSP · Question #1184
Which of the following is a covert channel type?
The correct answer is A. Storage. Covert channels are secret communication paths that bypass security controls, and they are classically categorized into storage and timing types.
Question
Which of the following is a covert channel type?
Options
- AStorage
- BPipe
- CMemory
- DMonitoring
How the community answered
(20 responses)- A95% (19)
- C5% (1)
Why each option
Covert channels are secret communication paths that bypass security controls, and they are classically categorized into storage and timing types.
Storage covert channels work by having one process write data to a shared storage location (such as a file, registry key, or attribute) that another process can then read, thereby communicating information outside of authorized channels. This is one of the two canonical covert channel types defined in security literature (storage and timing), originating from the Lampson covert channel model. The storage channel exploits shared resources to leak information without direct communication.
A pipe is an inter-process communication (IPC) mechanism, not a recognized category of covert channel; while pipes could theoretically be misused, 'pipe' is not a defined covert channel type in security frameworks.
Memory is a resource that may be leveraged in a storage covert channel, but 'memory' itself is not a named covert channel type; it is a component that could be part of a storage-based covert channel.
Monitoring is a defensive security activity used to detect threats and anomalies on a network or system, and has no classification as a covert channel type.
Concept tested: Covert channel types storage vs timing classification
Source: https://csrc.nist.gov/glossary/term/covert_channel
Topics
Community Discussion
No community discussion yet for this question.