CCSP · Question #67
A honeypot should contain _________ data.
The correct answer is C. Useless. A honeypot should contain useless data to attract attackers and gather intelligence without risking any valuable organizational assets.
Question
A honeypot should contain _________ data.
Options
- ARaw
- BProduction
- CUseless
- DSensitive
How the community answered
(22 responses)- B5% (1)
- C91% (20)
- D5% (1)
Why each option
A honeypot should contain useless data to attract attackers and gather intelligence without risking any valuable organizational assets.
Raw data could potentially be sensitive or production data, which would defeat the purpose of a safe, sacrificial system.
Production data is live, critical organizational data and should never be placed in a honeypot, as its compromise would be highly detrimental.
The purpose of a honeypot is to act as a decoy, luring attackers away from production systems and allowing security teams to observe their tactics, techniques, and procedures. By populating it with seemingly legitimate but ultimately useless data, organizations ensure that no actual sensitive or critical information is compromised if the honeypot is breached, making it a safe environment for threat intelligence gathering.
Placing sensitive data in a honeypot creates an unnecessary risk and contradicts the goal of using a honeypot for observation without harm.
Concept tested: Honeypot data content and purpose
Source: https://www.nist.gov/itl/applied-cybersecurity/nice/resources/nist-special-publication-800-137-information-security-continuous
Topics
Community Discussion
No community discussion yet for this question.