nerdexam
GIAC

GSLC · Question #354

Which is a computer system on the Internet that is expressly set up to attract and trap people who attempt to penetrate other people's computer systems?

The correct answer is B. Honeypot. A honeypot is a decoy computer system intentionally exposed on the Internet to attract and trap attackers attempting unauthorized access. It is used to study attacker behavior and detect intrusion attempts.

Security Operations & Incident Response Leadership

Question

Which is a computer system on the Internet that is expressly set up to attract and trap people who attempt to penetrate other people's computer systems?

Options

  • AHoneynet
  • BHoneypot
  • CHoneytrap
  • DHoneytoken

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    86% (25)
  • C
    7% (2)
  • D
    3% (1)

Why each option

A honeypot is a decoy computer system intentionally exposed on the Internet to attract and trap attackers attempting unauthorized access. It is used to study attacker behavior and detect intrusion attempts.

AHoneynet

A honeynet is a network composed of multiple honeypots, not a single computer system set up to trap attackers.

BHoneypotCorrect

A honeypot is a security resource specifically configured to be probed, attacked, or compromised, serving as a trap for malicious actors attempting to penetrate systems. It mimics a real system to lure attackers while monitoring and recording their activities without risking production systems. The definition is formally recognized in NIST and widely used security frameworks.

CHoneytrap

A honeytrap refers to a social engineering technique using personal attraction to manipulate a human target, not a computer system-based trap.

DHoneytoken

A honeytoken is a decoy digital artifact such as a fake credential or file used to detect unauthorized access, not a full computer system.

Concept tested: Honeypot definition and purpose in cybersecurity

Source: https://csrc.nist.gov/glossary/term/honeypot

Topics

#honeypot#deception technology#intrusion detection#threat trapping

Community Discussion

No community discussion yet for this question.

Full GSLC Practice