CISSP Security Architecture and Engineering Practice Question
Which type of covert channel uses the timing of events or operations to transmit information?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Timing channel
Timing channels manipulate the timing of events to encode data, while storage channels use shared resources.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Emanations channel
Why it's wrong here
An emanations channel exploits unintentional electromagnetic or acoustic emissions from computing devices to leak sensitive data. These channels rely on physical phenomena, such as radio frequency leakage from unshielded cables or sound waves from CPU activity, rather than manipulating the temporal sequence or duration of system events. Therefore, it does not align with the question's focus on event timing.
- ✗
Side channel
Why it's wrong here
A side channel is a general category of attack that extracts information from the physical implementation of a cryptosystem or other secure computation, rather than attacking the algorithm directly. While timing channels are indeed a type of side channel, the question specifically describes the mechanism of using event timing, making "timing channel" the more precise and accurate answer for the described scenario.
- ✓
Timing channel
Why this is correct
A timing channel is a specific type of covert channel that modulates information by altering the temporal characteristics of system events or operations. This involves varying the time taken for a process to complete, the delay between two events, or the order of operations, to encode and transmit data between processes that are not supposed to communicate directly. The receiver deciphers the secret message by observing these temporal variations.
- ✗
Storage channel
Why it's wrong here
A storage channel is a covert communication method that relies on the ability of one process to write information to a shared storage location and another process to read it. This typically involves manipulating shared resources like files, memory locations, or semaphores to encode data, rather than exploiting the temporal relationships or execution durations of system operations. Therefore, it does not utilize the timing of events as its primary mechanism.
Go deeper
Related to this question
About these practice questions
This CISSP question is part of Courseiva's 747-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISSP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISSP exam.