Module 02: Honeypots Flashcards
1
Q
What is a Honeypot?
A
Decoy devices to lure attackers
2
Q
What are Honeypot attributes?
A
Deliberately vulnerable and enticing
No false positives
Emulates real production
3
Q
Honeypot Goals
A
Analysis, Collection of forensic data.
4
Q
What is Research Honeypot?
A
Research Possible Future Threats.
5
Q
Low Interaction
A
Limited Access and covers specific ports and services.
6
Q
High Interaction
A
Emulates complete system and monitors all performed actions
7
Q
Where do you put Honeypots?
A
every subnet
8
Q
Honeytokens
A
Bogus email address False database data Browser cookies web beacons phone home embedded links
9
Q
Canary Trap
A
Internal Data leakers.
10
Q
Open Source Honeypot
A
Dionaea
Valhala
11
Q
MHN
A
Modern Honey Network
12
Q
Evasion
A
Misconfigured Honeypots can reveal it’s identity.