What is the primary purpose of deception technologies in network security?

To encrypt all network traffic to prevent eavesdropping

To replace traditional firewalls and intrusion detection systems

To automatically patch vulnerabilities in production systems

To lure attackers into interacting with fake resources so their behavior can be observed and analyzed

How do deception technologies contribute to threat intelligence?

By blocking all known malicious IP addresses

By providing real-world data on attacker tactics, techniques, and procedures (TTPs)

By encrypting all traffic between the deception system and the internet

By automatically patching vulnerabilities discovered during attacks

Why would an organization deploy a honeynet instead of a single honeypot?

To replace the need for a firewall

To automatically block attackers once they are detected

To reduce the cost of security monitoring

To create a more realistic target that encourages attackers to spend more time and reveal more of their tactics

A security architect is designing a deception strategy. They want to detect attackers who are specifically targeting the organization's intellectual property. They have a limited budget and need to choose between deploying a decoy system or deception tokens. Which approach is more effective for this specific goal?

Deploy a decoy system that mimics a file server

Deploy deception tokens that mimic sensitive documents

Deploy both a decoy system and deception tokens

A security analyst is reviewing logs from a honeypot and notices that an attacker attempted to use a specific exploit against the honeypot. How can this information be used to improve the organization's security posture?

To update the IDS/IPS signatures to detect the exploit

To block all traffic from the attacker's IP address

To ignore the attack because it was against a honeypot

CompTIANetwork+

Domain 4Objective 3

Deception Technologies N10-009 Practice Questions (Page 3)

Part of the Network security domain, which makes up ~28% of our current practice bank. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

7concepts

Questions 11–15

11foundation · easy
What is the primary purpose of deception technologies in network security?
Select an answer first
12foundation · easy
How do deception technologies contribute to threat intelligence?
Select an answer first
13foundation · easy
Why would an organization deploy a honeynet instead of a single honeypot?
Select an answer first
14expert · hard
A security architect is designing a deception strategy. They want to detect attackers who are specifically targeting the organization's intellectual property. They have a limited budget and need to choose between deploying a decoy system or deception tokens. Which approach is more effective for this specific goal?
Select an answer first
15application · medium
A security analyst is reviewing logs from a honeypot and notices that an attacker attempted to use a specific exploit against the honeypot. How can this information be used to improve the organization's security posture?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to N10-009

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “N10-009” is a trademark of its owner, used for identification only.