GAQM CPEH-001 Exam - Topic 5 Question 68 Discussion

Question

There are two types of honeypots- high and low interaction. Which of these describes a low interaction honeypot? Select the best answers.

Iluminada · Accepted Answer

A) Emulators of vulnerable programs and C) Easier to deploy and maintain and D) Tend to be used for production and E) More detectable

Iluminada · Answer

B) More likely to be penetrated

Iluminada · Answer

F) Tend to be used for research
Explanations:
A low interaction honeypot would have emulators of vulnerable programs, not the real programs.
A high interaction honeypot is more likely to be penetrated as it is running the real program and is more vulnerable than an emulator.
Low interaction honeypots are easier to deploy and maintain. Usually you would just use a program that is already available for download and install it. Hackers don't usually crash or destroy these types of programs and it would require little maintenance.
A low interaction honeypot tends to be used for production.
Low interaction honeypots are more detectable because you are using emulators of the real programs. Many hackers will see this and realize that they are in a honeypot.
A low interaction honeypot tends to be used for production. A high interaction honeypot tends to be used for research.