Examkin

Question

Difficulty: EasyDeception and Disruption Technologies

A security analyst deploys an intentionally vulnerable decoy server on an isolated network segment. The server contains simulated sensitive files and fake credentials designed to attract threat actors, observe their tactics, and generate alerts upon any interaction. Which of the following deception technologies has the analyst implemented?

  1. A
    Firewall
  2. B
    Intrusion Prevention System (IPS)
  3. HoneypotAnswer
  4. D
    Jump box

Answer

Honeypot
A honeypot is a deception mechanism designed to act as a decoy to lure attackers away from critical production resources while collecting telemetry on unauthorized techniques and behaviors.

Step-by-Step Solution

1
Identify the primary operational goal described in the scenario.
The goal is to lure threat actors using an intentionally vulnerable decoy server to observe tactics and alert on unauthorized interaction.
Deception technologies create false targets to draw malicious activity away from production systems.
2
Compare the scenario characteristics against standard security technology definitions.
A decoy system containing dummy data deployed specifically for monitoring adversary activity is defined as a honeypot.
Honeypots have no legitimate production value; any interaction with them is treated as suspicious or malicious activity.

Key Concept

Deception and Disruption Technologies
Rate this question

Topics

Deception and Disruption Technologies

More questions from this topic