nerdexam
EC-Council

312-50V10 · Question #841

which of the following information security controls creates an appealing isolated environment for hackers to prevent them from compromising critical targets while simultaneously gathering information

The correct answer is B. Honeypot. A honeypot is a deliberately vulnerable decoy system designed to attract attackers away from real assets while logging their tactics and tools.

Evading IDS, Firewalls, and Honeypots

Question

which of the following information security controls creates an appealing isolated environment for hackers to prevent them from compromising critical targets while simultaneously gathering information about the hacker?

Options

  • Aintrusion detection system
  • BHoneypot
  • CBotnet

How the community answered

(46 responses)
  • A
    9% (4)
  • B
    87% (40)
  • C
    4% (2)

Why each option

A honeypot is a deliberately vulnerable decoy system designed to attract attackers away from real assets while logging their tactics and tools.

Aintrusion detection system

An intrusion detection system passively monitors network traffic and generates alerts on suspicious activity but does not create a fake isolated environment to attract or study attackers.

BHoneypotCorrect

A honeypot creates an isolated, intentionally exposed environment that appears valuable to attackers, drawing them away from critical production systems. While the attacker interacts with the honeypot, security teams can silently monitor and record their techniques, tools, and behavior without risk to real infrastructure.

CBotnet

A botnet is a network of attacker-controlled compromised machines used to conduct malicious operations, not a defensive decoy control used to lure or gather intelligence on hackers.

Concept tested: Honeypot deception and attacker intelligence gathering

Source: https://csrc.nist.gov/glossary/term/honeypot

Topics

#honeypot#attacker deception#intrusion detection#network security controls

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice