nerdexam
CompTIA

SY0-701 · Question #218

Which of the following is most likely to be deployed to obtain and analyze attacker activity and techniques?

The correct answer is C. Honeypot. A honeypot is most likely to be deployed to obtain and analyze attacker activity and techniques. A honeypot is a decoy system set up to attract attackers, providing an opportunity to study their methods and behaviors in a controlled environment without risking actual systems…

Submitted by andreas_gr· Mar 6, 2026Security Operations

Question

Which of the following is most likely to be deployed to obtain and analyze attacker activity and techniques?

Options

  • AFirewall
  • BIDS
  • CHoneypot
  • DLayer 3 switch

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    8% (3)
  • C
    86% (31)
  • D
    3% (1)

Explanation

A honeypot is most likely to be deployed to obtain and analyze attacker activity and techniques. A honeypot is a decoy system set up to attract attackers, providing an opportunity to study their methods and behaviors in a controlled environment without risking actual systems. Honeypot: A decoy system designed to lure attackers, allowing administrators to observe and analyze attack patterns and techniques. Firewall: Primarily used to block unauthorized access to networks, not for observing attacker IDS (Intrusion Detection System): Detects and alerts on malicious activity but does not specifically engage attackers to observe their behavior. Layer 3 switch: Used for routing traffic within networks, not for analyzing attacker techniques.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice