A CISO wants to change the defense strategy to ward off attackers. To accomplish this the CISO is looking to a strategy where attackers are lured into a zone of a safe network where attackers can be…

Question

Options

• AModerate investment
• BPassive monitoring
• CIntegrated security controls
• DDynamic deception

• A
  8% (3)
• B
  3% (1)
• C
  5% (2)
• D
  84% (32)

Explanation

Dynamic deception (D) matches the scenario precisely: it is a proactive strategy that deploys decoy environments - such as honeypots or deception networks - to lure attackers into a controlled zone where they can be observed, contained, and neutralized without exposing real assets. Moderate investment (A) describes a budget allocation level, not a defense strategy at all. Passive monitoring (B) involves only watching for threats without engaging or redirecting attackers, so there is no luring or quarantine zone involved. Integrated security controls (C) refers to layering multiple security tools together across an environment, which is a broad defensive posture, not a targeted deception tactic.

Memory tip: Think of "dynamic deception" as a digital mousetrap - you actively bait attackers into a fake environment you fully control, as opposed to just watching (passive monitoring) or building walls (integrated controls).

No community discussion yet for this question.