CertNexus Certified Cyber Secure Coder (CSC) — Question 65

After a hacker obtained a shell on a Linux box, the hacker then sends the exfiltrated data via Domain Name System (DNS). This is an example of which type of data exfiltration?

Answer options

• A. Covert channels
• B. File sharing services
• C. Steganography
• D. Rogue service

Correct answer: A

Explanation

The correct answer is A, as covert channels involve the unauthorized transfer of data through channels that are not intended for communication, like DNS. Options B (File sharing services) and D (Rogue service) do not pertain to the use of DNS for exfiltration, while C (Steganography) refers to hiding data within other data, which is not applicable in this scenario.