システム管理者は、ネットワーク内の攻撃を検出および調査するために、欺瞞技術を使用します。管理者は、偽のパスワードと顧客の支払い情報が記載された文書を配布します。管理者が使用している技術は次のうちどれですか?
正解:C
The best answer is C. Honeyfile.
A honeyfile is a decoy file that is intentionally placed where an attacker might discover and open it. It often contains fake but tempting information, such as passwords, payment data, or confidential records. If someone accesses, copies, or opens the file, that activity can alert defenders to suspicious behavior.
This question specifically describes a document filled with fake passwords and customer payment information. Because the decoy is a file or document, honeyfile is the most precise answer.
Why the other options are incorrect:
A). HoneytokenA honeytoken is a broader term for fake digital data used to detect unauthorized access, such as fake credentials, database entries, or API keys. A honeyfile can be considered a type of honeytoken, but since the question specifically mentions a document, honeyfile is the better answer.
B). HoneypotA honeypot is a decoy system or service designed to attract attackers, not just a single document.
D). HoneynetA honeynet is an entire network of decoy systems used for detection and research.
From a Security+ perspective, deception technologies include honeyfiles, honeytokens, honeypots, and honeynets. Since the item deployed is a document, C is the best answer.