GSLC · Question #419
You are taking over the security of an existing network. You discover a machine that is not being used as such, but has software on it that emulates the activity of a sensitive database server. What…
The correct answer is C. A Honey Pot. A honeypot is a decoy system intentionally designed to emulate a real or sensitive resource, attracting attackers while monitoring their behavior without exposing actual production systems.
Question
You are taking over the security of an existing network. You discover a machine that is not being used as such, but has software on it that emulates the activity of a sensitive database server. What is this?
Options
- AA Virus
- BA reactive IDS.
- CA Honey Pot
- DA Polymorphic Virus
How the community answered
(36 responses)- B3% (1)
- C94% (34)
- D3% (1)
Why each option
A honeypot is a decoy system intentionally designed to emulate a real or sensitive resource, attracting attackers while monitoring their behavior without exposing actual production systems.
A virus is self-replicating malicious software that infects other programs; it has no function as a decoy or server emulation tool.
A reactive IDS detects intrusions and triggers automatic countermeasures in response; it does not emulate server behavior to attract attackers.
A honeypot is a security deception tool that simulates a legitimate and attractive target - such as a sensitive database server - without serving any real operational purpose. It lures attackers into interacting with the fake system, allowing defenders to observe techniques, gather threat intelligence, and detect intrusions without risking real assets.
A polymorphic virus is malware that mutates its own code to evade signature-based detection; it is an offensive threat, not a defensive decoy system.
Concept tested: Honeypot deception-based intrusion detection
Source: https://csrc.nist.gov/glossary/term/honeypot
Topics
Community Discussion
No community discussion yet for this question.