Last Updated on April 30, 2021 by Admin
Which IPS signature trigger category uses a decoy server to divert attacks away from production devices?
- pattern-based detection
- anomaly-based detection
- honey pot-based detection
- policy-based detection
Answers Explanation & Hints:
Honey pot-based detection uses a decoy server to attract attacks and to divert attacks away from production devices. Use of a honey pot can give administrators time to analyze incoming attacks and malicious traffic patterns to tune sensor signatures.