What type of system is designed to mislead attackers and collect information about attack methods?

What type of system is designed to mislead attackers and collect information about attack methods?

• A. DNS sinkhole
• B. Darknets
• C. Honeypots
• D. Sandboxes

Answer: (C)

Honeypots are decoy systems that look like valuable targets to lure attackers. They’re set up to mislead intruders into interacting with a controlled environment, and every action—the commands they run, the tools they use, the vulnerabilities they probe, and the paths they try—gets logged and analyzed. This dual purpose lets defenders study attack methods in detail without risking production systems, turning attempted intrusions into data you can learn from. DNS sinkholes redirect malicious domain requests to a null or harmless destination to prevent harm, focusing on blocking traffic rather than observing attackers and their techniques. Darknets refer to hidden or unused parts of the network intended for anonymity or privacy, not built as interactive traps to collect attacker behavior. Sandboxes isolate and safely execute suspicious software to analyze its behavior in a controlled environment, but they’re meant for malware analysis rather than deceiving live attackers and gathering real-world attack data.

Honeypots are decoy systems that look like valuable targets to lure attackers. They’re set up to mislead intruders into interacting with a controlled environment, and every action—the commands they run, the tools they use, the vulnerabilities they probe, and the paths they try—gets logged and analyzed. This dual purpose lets defenders study attack methods in detail without risking production systems, turning attempted intrusions into data you can learn from.

DNS sinkholes redirect malicious domain requests to a null or harmless destination to prevent harm, focusing on blocking traffic rather than observing attackers and their techniques. Darknets refer to hidden or unused parts of the network intended for anonymity or privacy, not built as interactive traps to collect attacker behavior. Sandboxes isolate and safely execute suspicious software to analyze its behavior in a controlled environment, but they’re meant for malware analysis rather than deceiving live attackers and gathering real-world attack data.