Study. uk . com
  1. Home
  2. All questions
  3. Question 204

CompTIA Security+ study material · question 204 of 611

Why does an alert from a honeypot carry unusually high confidence?

  1. Legitimate users have no reason to interact with it, so any interaction is suspicious
  2. Honeypots use stronger detection signatures
  3. Honeypots are placed outside the firewall
  4. Honeypots log more data than production systems
Show the answer

Answer: A. Legitimate users have no reason to interact with it, so any interaction is suspicious

Deception assets exist only to be touched, so contact with one is a signal rather than an anomaly to triage.

Challenge yourself on this topic → Study as cards