SSCP · Question #1328
A _________ is an information path that is not normally used for communication within a computer system. It is not protected by the any of the systems security mechanisms.
The correct answer is C. Covert channel. A covert channel is an unapproved and hidden communication pathway within a computer system that operates outside of normal communication protocols and security controls.
Question
A _________ is an information path that is not normally used for communication within a computer system. It is not protected by the any of the systems security mechanisms.
Options
- ATrojaned program
- BBackdoor
- CCovert channel
- DHijacked session
- EBack-path
How the community answered
(16 responses)- A6% (1)
- C88% (14)
- D6% (1)
Why each option
A covert channel is an unapproved and hidden communication pathway within a computer system that operates outside of normal communication protocols and security controls.
A Trojaned program is a type of malicious software disguised as legitimate, not an information path.
A backdoor is a secret method of bypassing normal authentication, not an information path itself.
A covert channel exploits system resources or operations not intended for communication to secretly transfer information between processes or users, bypassing security policies.
A hijacked session is when an attacker takes over an authenticated user's active session, which is an attack technique, not a type of information path.
"Back-path" is not a standard computer security term for an unprotected information path.
Concept tested: Covert channel definition
Source: https://csrc.nist.gov/glossary/term/covert_channel
Topics
Community Discussion
No community discussion yet for this question.