SSCP Question #202: Real Exam Question with Answer & Explanation

The correct answer is A: Storage and timing.. There are exactly two recognized types of covert channels: storage channels (data is communicated by reading/writing to a shared storage location) and timing channels (data is communicated by modulating process timing or resource usage, which another process can observe). These a

Submitted by tom_us· Apr 18, 2026Security Concepts and Practices

Question

Which of the following can be used as a covert channel?

Options

AStorage and timing.
BStorage and low bits.
CStorage and permissions.
DStorage and classification.

Explanation

There are exactly two recognized types of covert channels: storage channels (data is communicated by reading/writing to a shared storage location) and timing channels (data is communicated by modulating process timing or resource usage, which another process can observe). These are the canonical covert channel classifications as defined in the Orange Book (TCSEC) and security literature. Low bits, permissions, and classification labels are not recognized covert channel categories.

Topics

#covert channels#information flow#system security

Community Discussion

No community discussion yet for this question.

Full SSCP Practice Browse All SSCP Questions