What is the purpose of a honeypot IPS?

The correct answer is D. To collect information about attacks. Honeypot systems use a dummy server to attract attacks. The purpose of the honeypot approach is to distract attacks away from real network devices. By staging different types of vulnerabilities in the honeypot server, you can analyze incoming types of attacks and malicious…

IPS

Question

Options

ATo create customized policies
BTo detect unknown attacks
CTo normalize streams
DTo collect information about attacks

How the community answered

(31 responses)

A
6% (2)
B
3% (1)
C
3% (1)
D
87% (27)

Explanation

Honeypot systems use a dummy server to attract attacks. The purpose of the honeypot approach is to distract attacks away from real network devices. By staging different types of vulnerabilities in the honeypot server, you can analyze incoming types of attacks and malicious traffic patterns. You can use this analysis to tune your sensor signatures to detect new types of malicious network traffic. Honeypot systems are used in production environments, typically by large organizations that come across as interesting targets for hackers, such as financial enterprises, governmental agencies, and so on. Also, antivirus and other security vendors tend to use them for research.

Topics

#honeypot#IPS#attack intelligence#threat detection

Community Discussion

No community discussion yet for this question.

Full 210-260 Practice