nerdexam
(ISC)2

CCSP · Question #67

A honeypot should contain _________ data.

The correct answer is C. Useless. A honeypot should contain useless data to attract attackers and gather intelligence without risking any valuable organizational assets.

Submitted by jakub_pl· Apr 18, 2026Cloud Security Operations

Question

A honeypot should contain _________ data.

Options

  • ARaw
  • BProduction
  • CUseless
  • DSensitive

How the community answered

(22 responses)
  • B
    5% (1)
  • C
    91% (20)
  • D
    5% (1)

Why each option

A honeypot should contain useless data to attract attackers and gather intelligence without risking any valuable organizational assets.

ARaw

Raw data could potentially be sensitive or production data, which would defeat the purpose of a safe, sacrificial system.

BProduction

Production data is live, critical organizational data and should never be placed in a honeypot, as its compromise would be highly detrimental.

CUselessCorrect

The purpose of a honeypot is to act as a decoy, luring attackers away from production systems and allowing security teams to observe their tactics, techniques, and procedures. By populating it with seemingly legitimate but ultimately useless data, organizations ensure that no actual sensitive or critical information is compromised if the honeypot is breached, making it a safe environment for threat intelligence gathering.

DSensitive

Placing sensitive data in a honeypot creates an unnecessary risk and contradicts the goal of using a honeypot for observation without harm.

Concept tested: Honeypot data content and purpose

Source: https://www.nist.gov/itl/applied-cybersecurity/nice/resources/nist-special-publication-800-137-information-security-continuous

Topics

#Honeypots#Threat Intelligence#Security Monitoring#Decoy Systems

Community Discussion

No community discussion yet for this question.

Full CCSP Practice