nerdexam
EC-Council

312-38 · Question #17

You are an Administrator for a network at an investment bank. You are concerned about individuals breeching your network and being able to steal data before you can detect their presence and shut…

The correct answer is C. Implement a honey pot. A honeypot is the best solution here because it directly addresses the specific threat described: attackers who have already breached the network and are stealing data before detection. A honeypot is a decoy system designed to lure intruders, allowing security teams to detect…

Network Security Monitoring and Analysis

Question

You are an Administrator for a network at an investment bank. You are concerned about individuals breeching your network and being able to steal data before you can detect their presence and shut down their access. Which of the following is the best way to address this issue?

Options

  • AImplement a strong password policy.
  • BImplement a strong firewall.
  • CImplement a honey pot.
  • DImplement network based anti virus.

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    14% (5)
  • C
    77% (27)
  • D
    6% (2)

Explanation

A honeypot is the best solution here because it directly addresses the specific threat described: attackers who have already breached the network and are stealing data before detection. A honeypot is a decoy system designed to lure intruders, allowing security teams to detect unauthorized activity early, study attacker behavior, and respond before real data is compromised.

Why the distractors fail:

  • A (Strong password policy) helps prevent initial unauthorized access but does nothing once an attacker is already inside.
  • B (Strong firewall) is a perimeter defense that blocks entry points - again, it doesn't help detect or slow an attacker who has already gotten in.
  • D (Network-based antivirus) targets malware and known malicious signatures, not the behavior of a human attacker quietly exfiltrating data.

Memory tip: Think of a honeypot like a fake jewelry display in a store - it doesn't stop thieves from entering, but it catches them in the act and buys time to respond. Whenever an exam question emphasizes detecting and slowing down attackers after a breach, honeypot is your answer.

Topics

#Honeypots#Intrusion Detection#Network Monitoring#Detective Controls

Community Discussion

No community discussion yet for this question.

Full 312-38 Practice