After a security incident, the incident response team wants to understand the attacker's tactics, techniques, and procedures (TTPs). They review logs from a decoy system that was deployed in the network. How does this contribute to threat intelligence?

It automatically blocks the attacker's IP address

It provides a backup of critical data

It provides real-world data on attacker behavior

It replaces the need for a SIEM

What is a deception token?

A software update that patches security vulnerabilities

A fake credential or data element planted to detect unauthorized use

A type of firewall rule that blocks malicious traffic

A hardware device that generates one-time passwords

How does a honeypot help detect unauthorized access attempts?

By blocking all traffic from unknown IP addresses

By encrypting all data stored on the honeypot

By providing a tempting target that logs all interaction, so any connection to it signals a potential attacker

By generating an alert whenever any user logs in to the production network

CompTIANetwork+

Domain 4Objective 3

Deception Technologies N10-009 Practice Questions (Page 2)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

7concepts

Questions 6–10

6application · medium
After a security incident, the incident response team wants to understand the attacker's tactics, techniques, and procedures (TTPs). They review logs from a decoy system that was deployed in the network. How does this contribute to threat intelligence?
Select an answer first
7application · medium
A security administrator wants to detect if an attacker has accessed a specific file share. They place a fake file with a unique name that, when opened, triggers an alert. What is this technique called?
Select an answer first
8application · medium
A security analyst wants to detect lateral movement inside the corporate network. They deploy a server that is not used by any legitimate service, but it appears to run a database with fake credentials. The server logs all connection attempts and sends alerts to the SIEM. Which deception technology is the analyst using?
Select an answer first
9foundation · easy
What is a deception token?
Select an answer first
10foundation · easy
How does a honeypot help detect unauthorized access attempts?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.

Deception Technologies N10-009 Practice Questions (Page 2)

Questions 6–10

After a security incident, the incident response team wants to understand the attacker's tactics, techniques, and procedures (TTPs). They review logs from a decoy system that was deployed in the network. How does this contribute to threat intelligence?

A security administrator wants to detect if an attacker has accessed a specific file share. They place a fake file with a unique name that, when opened, triggers an alert. What is this technique called?

What is a deception token?

How does a honeypot help detect unauthorized access attempts?

Keep studying — Network security