nerdexam
(ISC)2

CISSP · Question #190

Data leakage of sensitive information is MOST often concealed by which of the following?

The correct answer is A. Secure Sockets Layer (SSL). SSL/TLS encryption is commonly exploited by attackers to hide data exfiltration within encrypted traffic, making it difficult for security tools to inspect the contents of the transmission.

Submitted by tarun92· Mar 5, 2026Communication and Network Security

Question

Data leakage of sensitive information is MOST often concealed by which of the following?

Options

  • ASecure Sockets Layer (SSL)
  • BSecure Hash Algorithm (SHA)
  • CWired Equivalent Privacy (WEP)
  • DSecure Post Office Protocol (POP)

How the community answered

(32 responses)
  • A
    81% (26)
  • B
    3% (1)
  • C
    3% (1)
  • D
    13% (4)

Why each option

SSL/TLS encryption is commonly exploited by attackers to hide data exfiltration within encrypted traffic, making it difficult for security tools to inspect the contents of the transmission.

ASecure Sockets Layer (SSL)Correct

SSL encrypts traffic between client and server, which is the same mechanism attackers exploit to conceal data leakage - malicious outbound data blends into legitimate encrypted HTTPS traffic, bypassing traditional deep packet inspection. Because the payload is encrypted, network monitoring tools cannot easily detect sensitive data being exfiltrated without SSL/TLS inspection capabilities. This makes SSL the most common method used to conceal data leakage.

BSecure Hash Algorithm (SHA)

SHA is a cryptographic hashing algorithm used for data integrity verification, not for encrypting or concealing data transmissions, so it cannot be used to hide exfiltrated data in transit.

CWired Equivalent Privacy (WEP)

WEP is a deprecated and easily cracked wireless encryption protocol that applies only to Wi-Fi network segments and is not used as a general mechanism to conceal data leakage over the internet.

DSecure Post Office Protocol (POP)

Secure POP (POP3S) is a specific email retrieval protocol secured with TLS, and while it uses encryption, it is a narrow-use protocol not broadly used to conceal general data exfiltration the way SSL/TLS traffic is.

Concept tested: SSL encryption used to conceal data exfiltration

Source: https://www.cisa.gov/sites/default/files/publications/CISA-Insights_Detect-and-Prevent-Web-Shell-Malware_S508C.pdf

Topics

#Data exfiltration#SSL/TLS#Network security#Traffic analysis bypass

Community Discussion

No community discussion yet for this question.

Full CISSP Practice