Questão 55 — CompTIA SY0-701 CompTIA Security+ Certification Exam
Which of the following would most likely be deployed to obtain and analyze attacker activity and techniques?
- A. Firewall
- B. IDS
- C. Honeypot
- D. Layer 3 switch
Resposta correta:
C
Explicação
Explanation: Correct answer: C. Honeypot A honeypot is the tool most likely deployed to obtain and analyze attacker activity and techniques because: Attacker Attraction:Honeypots are intentionally vulnerable systems designed to attract attackers and G deceive them into revealing their methods Activity Logging:All attacker interactions are recorded, providing detailed information about attack G techniques and tools used Low Risk:Honeypots are isolated from production systems, so attacks against them cause no actual damage G Technique Analysis:Security teams can analyze attacker behavior, exploits, malware, and tactics without G affecting real systems Threat Intelligence:Data gathered from honeypots provides valuable intelligence about emerging threats G and attacker methods Honeypots are specialized security tools used to study adversary behavior and improve defensive capabilities.
Quer todas as 907 questões por R$ 1,00?