There are two types of honeypots- high and low interaction. Which of these describes a low
interaction honeypot? Select the best answers.
A.
Emulators of vulnerable programs
B.
More likely to be penetrated
C.
Easier to deploy and maintain
D.
Tend to be used for production
E.
More detectable
F.
Tend to be used for research
Explanation:
A low interaction honeypot would have emulators of vulnerable programs,not the real programs.
A high interaction honeypot is more likely to be penetrated as it is running the real program and is
more vulnerable than an emulator.
Low interaction honeypots are easier to deploy and maintain. Usually you would just use a
program that is already available for download and install it. Hackers don’t usually crash or destroy
these types of programs and it would require little maintenance.
A low interaction honeypot tends to be used for production.
Low interaction honeypots are more detectable because you are using emulators of the real
programs. Many hackers will see this and realize that they are in a honeypot.
A low interaction honeypot tends to be used for production. A high interaction honeypot tends to
be used for research.
A,C,D,E
Answer D is more likely description high honeypots.
https://en.wikipedia.org/wiki/Honeypot_(computing)
Production honeypots are placed inside the production network with other production servers by an organization to improve their overall state of security. Normally, production honeypots are low-interaction honeypots, which are easier to deploy.