nerdexam
GIAC

GSLC · Question #229

A honey pot is a computer trap that is used to attract potential intruders or attackers. Which of the following are some advantages of honey pots? Each correct answer represents a complete solution. C

The correct answer is C. Reduced false positives D. Small set of data. Honeypots are decoy systems that help defenders study attackers; their key advantages include generating minimal false positives and producing a small, focused dataset of only malicious activity.

Security Operations & Incident Response Leadership

Question

A honey pot is a computer trap that is used to attract potential intruders or attackers. Which of the following are some advantages of honey pots? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ARisk of takeover
  • BLimited view
  • CReduced false positives
  • DSmall set of data

How the community answered

(45 responses)
  • A
    7% (3)
  • B
    4% (2)
  • C
    89% (40)

Why each option

Honeypots are decoy systems that help defenders study attackers; their key advantages include generating minimal false positives and producing a small, focused dataset of only malicious activity.

ARisk of takeover

Risk of takeover is a disadvantage of honeypots, not an advantage - a compromised honeypot can be used as a pivot point to attack legitimate internal systems.

BLimited view

Limited view is a disadvantage of honeypots, not an advantage - honeypots only observe attacks directed specifically at them and cannot monitor broader network-wide threats.

CReduced false positivesCorrect

Because only attackers interact with a honeypot - legitimate users have no reason to access it - any traffic logged is inherently suspicious, which eliminates the false positive noise common in production IDS systems and makes alerts highly reliable.

DSmall set of dataCorrect

Honeypots attract only attacker traffic rather than normal user activity, so the dataset they generate is small and targeted, containing exclusively malicious activity that is straightforward to analyze without filtering out benign events.

Concept tested: Honeypot advantages and disadvantages in network security

Source: https://csrc.nist.gov/glossary/term/honeypot

Topics

#honeypot#intrusion detection#false positives#threat deception

Community Discussion

No community discussion yet for this question.

Full GSLC Practice