GSLC · Question #229
A honey pot is a computer trap that is used to attract potential intruders or attackers. Which of the following are some advantages of honey pots? Each correct answer represents a complete solution. C
The correct answer is C. Reduced false positives D. Small set of data. Honeypots are decoy systems that help defenders study attackers; their key advantages include generating minimal false positives and producing a small, focused dataset of only malicious activity.
Question
A honey pot is a computer trap that is used to attract potential intruders or attackers. Which of the following are some advantages of honey pots? Each correct answer represents a complete solution. Choose all that apply.
Options
- ARisk of takeover
- BLimited view
- CReduced false positives
- DSmall set of data
How the community answered
(45 responses)- A7% (3)
- B4% (2)
- C89% (40)
Why each option
Honeypots are decoy systems that help defenders study attackers; their key advantages include generating minimal false positives and producing a small, focused dataset of only malicious activity.
Risk of takeover is a disadvantage of honeypots, not an advantage - a compromised honeypot can be used as a pivot point to attack legitimate internal systems.
Limited view is a disadvantage of honeypots, not an advantage - honeypots only observe attacks directed specifically at them and cannot monitor broader network-wide threats.
Because only attackers interact with a honeypot - legitimate users have no reason to access it - any traffic logged is inherently suspicious, which eliminates the false positive noise common in production IDS systems and makes alerts highly reliable.
Honeypots attract only attacker traffic rather than normal user activity, so the dataset they generate is small and targeted, containing exclusively malicious activity that is straightforward to analyze without filtering out benign events.
Concept tested: Honeypot advantages and disadvantages in network security
Source: https://csrc.nist.gov/glossary/term/honeypot
Topics
Community Discussion
No community discussion yet for this question.