nerdexam
GIAC

GSLC · Question #419

You are taking over the security of an existing network. You discover a machine that is not being used as such, but has software on it that emulates the activity of a sensitive database server. What…

The correct answer is C. A Honey Pot. A honeypot is a decoy system intentionally designed to emulate a real or sensitive resource, attracting attackers while monitoring their behavior without exposing actual production systems.

Security Operations & Incident Response Leadership

Question

You are taking over the security of an existing network. You discover a machine that is not being used as such, but has software on it that emulates the activity of a sensitive database server. What is this?

Options

  • AA Virus
  • BA reactive IDS.
  • CA Honey Pot
  • DA Polymorphic Virus

How the community answered

(36 responses)
  • B
    3% (1)
  • C
    94% (34)
  • D
    3% (1)

Why each option

A honeypot is a decoy system intentionally designed to emulate a real or sensitive resource, attracting attackers while monitoring their behavior without exposing actual production systems.

AA Virus

A virus is self-replicating malicious software that infects other programs; it has no function as a decoy or server emulation tool.

BA reactive IDS.

A reactive IDS detects intrusions and triggers automatic countermeasures in response; it does not emulate server behavior to attract attackers.

CA Honey PotCorrect

A honeypot is a security deception tool that simulates a legitimate and attractive target - such as a sensitive database server - without serving any real operational purpose. It lures attackers into interacting with the fake system, allowing defenders to observe techniques, gather threat intelligence, and detect intrusions without risking real assets.

DA Polymorphic Virus

A polymorphic virus is malware that mutates its own code to evade signature-based detection; it is an offensive threat, not a defensive decoy system.

Concept tested: Honeypot deception-based intrusion detection

Source: https://csrc.nist.gov/glossary/term/honeypot

Topics

#honeypot#deception technology#intrusion detection#network defense

Community Discussion

No community discussion yet for this question.

Full GSLC Practice