312-49 Question #375: Real Exam Question with Answer & Explanation

Question

Jason has set up a honeypot environment by creating a DMZ that has no physical or logical access to his production network. In this honeypot, he has placed a server running Windows Active Directory. He has also placed a Web server in the DMZ that services a number of web pages that offer visitors a chance to download sensitive information by clicking on a button. A week later, Jason finds in his network logs how an intruder accessed the honeypot and downloaded sensitive information. Jason uses the logs to try and prosecute the intruder for stealing sensitive corporate information. Why will this not be viable?

Options

• AEnticement
• BEntrapment
• CIntruding into ahoneypot is not illegal
• DIntruding into a DMZ is not illegal

Explanation

Entrapment occurs when law enforcement or a party induces someone to commit a crime they would not otherwise have committed. Jason set up a public-facing web page that actively invited visitors to download 'sensitive information' by clicking a button — this is a deliberate lure that induced the behavior. A defense attorney could successfully argue entrapment because Jason's design instigated the act of downloading. Enticement (option A) is the legal alternative — passively providing opportunity to someone already predisposed to commit the crime — which would not apply here since the page actively solicited the action. Accessing a honeypot or DMZ can still be illegal, so options C and D are incorrect.

No community discussion yet for this question.