312-38 · Question #17
You are an Administrator for a network at an investment bank. You are concerned about individuals breeching your network and being able to steal data before you can detect their presence and shut…
The correct answer is C. Implement a honey pot. A honeypot is the best solution here because it directly addresses the specific threat described: attackers who have already breached the network and are stealing data before detection. A honeypot is a decoy system designed to lure intruders, allowing security teams to detect…
Question
Options
- AImplement a strong password policy.
- BImplement a strong firewall.
- CImplement a honey pot.
- DImplement network based anti virus.
How the community answered
(35 responses)- A3% (1)
- B14% (5)
- C77% (27)
- D6% (2)
Explanation
A honeypot is the best solution here because it directly addresses the specific threat described: attackers who have already breached the network and are stealing data before detection. A honeypot is a decoy system designed to lure intruders, allowing security teams to detect unauthorized activity early, study attacker behavior, and respond before real data is compromised.
Why the distractors fail:
- A (Strong password policy) helps prevent initial unauthorized access but does nothing once an attacker is already inside.
- B (Strong firewall) is a perimeter defense that blocks entry points - again, it doesn't help detect or slow an attacker who has already gotten in.
- D (Network-based antivirus) targets malware and known malicious signatures, not the behavior of a human attacker quietly exfiltrating data.
Memory tip: Think of a honeypot like a fake jewelry display in a store - it doesn't stop thieves from entering, but it catches them in the act and buys time to respond. Whenever an exam question emphasizes detecting and slowing down attackers after a breach, honeypot is your answer.
Topics
Community Discussion
No community discussion yet for this question.