Examkin

Question

Difficulty: HardDeception and Disruption Technologies

A security engineer aims to detect unauthorized internal reconnaissance and credential scraping within private source code repositories without provisioning decoy server infrastructure or altering existing network routing. The engineer inserts inactive, traceable API access keys into public test environment files. Any attempt to authenticate using these fake credentials triggers an immediate high-fidelity alert containing the origin IP address and request details. Which of the following deception technologies did the security engineer deploy?

  1. HoneytokenAnswer
  2. B
    Honeynet
  3. C
    DNS sinkhole
  4. D
    Inline intrusion prevention system

Answer

Honeytoken is the correct technology because fake API keys and credentials used to lure and detect unauthorized scrapers qualify as honeytokens.
Honeytokens are specific fake data artifacts—such as fake database entries, cloud access keys, or API tokens—placed inside systems or repositories. Because legitimate applications and personnel do not use these tokens, any usage indicates unauthorized activity or compromised systems, providing high-fidelity detection without heavy infrastructure overhead.

Step-by-Step Solution

1
Analyze the deployed resource type described in the scenario.
The resource consists of fake API access keys placed inside repository files, not dedicated host OS environments or network appliances.
Deception technologies are categorized by whether they mimic data assets (honeytokens/honeyfiles), individual servers (honeypots), or network segments (honeynets).
2
Evaluate the detection mechanism.
Alerts trigger when an adversary attempts to utilize the non-functional credential.
Honeytokens rely on the principle that legitimate users have no operational reason to access or use fake artifacts.
3
Match the implementation to the correct deception classification.
The deployment matches a honeytoken.
Embedding fake credentials, database records, or API keys into valid files directly defines honeytoken usage.

Key Concept

Honeytokens vs. Decoy Infrastructure in Active Defense
Rate this question

Topics

Deception and Disruption Technologies

More questions from this topic