nerdexam
(ISC)2

CISSP · Question #1184

Which of the following is a covert channel type?

The correct answer is A. Storage. Covert channels are secret communication paths that bypass security controls, and they are classically categorized into storage and timing types.

Submitted by rania.sa· Mar 5, 2026Security Architecture and Engineering

Question

Which of the following is a covert channel type?

Options

  • AStorage
  • BPipe
  • CMemory
  • DMonitoring

How the community answered

(20 responses)
  • A
    95% (19)
  • C
    5% (1)

Why each option

Covert channels are secret communication paths that bypass security controls, and they are classically categorized into storage and timing types.

AStorageCorrect

Storage covert channels work by having one process write data to a shared storage location (such as a file, registry key, or attribute) that another process can then read, thereby communicating information outside of authorized channels. This is one of the two canonical covert channel types defined in security literature (storage and timing), originating from the Lampson covert channel model. The storage channel exploits shared resources to leak information without direct communication.

BPipe

A pipe is an inter-process communication (IPC) mechanism, not a recognized category of covert channel; while pipes could theoretically be misused, 'pipe' is not a defined covert channel type in security frameworks.

CMemory

Memory is a resource that may be leveraged in a storage covert channel, but 'memory' itself is not a named covert channel type; it is a component that could be part of a storage-based covert channel.

DMonitoring

Monitoring is a defensive security activity used to detect threats and anomalies on a network or system, and has no classification as a covert channel type.

Concept tested: Covert channel types storage vs timing classification

Source: https://csrc.nist.gov/glossary/term/covert_channel

Topics

#covert channels#information flow#data leakage

Community Discussion

No community discussion yet for this question.

Full CISSP Practice