nerdexam
GIAC

GSLC · Question #359

Which of the following honeypots captures limited amounts of information, mainly transactional data and some limited interaction?

The correct answer is A. Low-interaction. Low-interaction honeypots emulate only minimal services and collect basic transactional data with little real attacker engagement.

Security Operations & Incident Response Leadership

Question

Which of the following honeypots captures limited amounts of information, mainly transactional data and some limited interaction?

Options

  • ALow-interaction
  • BHigh-interaction
  • CNetwork
  • DMedium-interaction

How the community answered

(35 responses)
  • A
    91% (32)
  • B
    6% (2)
  • C
    3% (1)

Why each option

Low-interaction honeypots emulate only minimal services and collect basic transactional data with little real attacker engagement.

ALow-interactionCorrect

A low-interaction honeypot simulates a limited set of services or protocols and captures only basic transactional data such as connection attempts, source IPs, and packet headers, without exposing a real operating system to the attacker. This approach minimizes both risk and resource consumption while still providing enough intelligence to detect automated scanning and probing activity.

BHigh-interaction

High-interaction honeypots run fully functional operating systems and services, enabling extensive attacker engagement and capturing rich behavioral data far beyond simple transactional records.

CNetwork

Network honeypot describes the deployment context or scope, not the interaction level or data capture depth that characterizes a honeypot type.

DMedium-interaction

Medium-interaction honeypots emulate a broader set of services than low-interaction types and capture more detailed behavioral data that goes well beyond limited transactional records.

Concept tested: Honeypot interaction levels and data capture characteristics

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-94.pdf

Topics

#low-interaction honeypot#honeypot types#deception technology#threat intelligence

Community Discussion

No community discussion yet for this question.

Full GSLC Practice