Deception and Disruption

What is the primary purpose of a honeypot in cybersecurity?

• To prevent all forms of cyberattacks from reaching a network.

• To encrypt sensitive data to make it unreadable to attackers.

• To attract and trap attackers to gather information about their techniques.

• To automatically block all suspicious IP addresses from accessing a system.

How does a honeynet differ from a single honeypot?

• A honeynet is a physical device, while a honeypot is virtual.

• A honeynet is a larger deception network comprising multiple virtualized honeypots and other network components.

• A honeynet is used only for internal network monitoring, unlike honeypots.

• A honeynet focuses on preventing attacks, whereas a honeypot focuses on detection.

What is the main characteristic of a honeyfile?

• It is a real file containing sensitive production data.

• It is a file with fake information designed to attract and alert about unauthorized access.

• It is an encrypted file that requires special decryption keys to open.

• It is a system log file that records all network traffic.

What is the primary purpose of using honeytokens?

• To provide legitimate access credentials to authorized users.

• To encrypt communication channels between network devices.

• To track malicious actors by embedding traceable data that alerts when accessed or distributed.

• To automatically patch vulnerabilities in software applications.

Which of the following is NOT mentioned as a potential example of a honeytoken?

• API credentials

• Fake email addresses

• Browser cookies

• User passwords for production systems