Selecting deception techniques for a scenario involves:

Question

Options

• APlacing honeypots within the network
• BCreating fake social media accounts for the IT staff
• CUsing misleading comments in the code
• DSending false positive alerts to attackers

• A
  93% (42)
• C
  2% (1)
• D
  4% (2)

Explanation

Placing honeypots within the network (A) is a recognized deception technique in cybersecurity - honeypots are decoy systems intentionally deployed to lure attackers, gather intelligence on their tactics, and alert defenders to intrusion attempts, making them the textbook definition of network deception. Creating fake social media accounts (B) is a social engineering or OSINT tactic, not a network deception technique - it targets people, not adversaries probing infrastructure. Misleading code comments (C) are a form of obscurity at best and poor practice at worst; they don't constitute a structured deception strategy. Sending false positive alerts to attackers (D) is not a standard deception practice - defenders don't typically push alerts toward adversaries; this conflates alert management with active deception.

Memory tip: Think "Honey traps catch flies" - honeypots attract and trap attackers inside your network, which is the core idea behind selecting deception techniques in a security scenario.

No community discussion yet for this question.