thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Foundational

Honeypot

A decoy system designed to attract attackers, detect intrusion attempts and study their techniques.

Definition

Honeypots have no legitimate production purpose, so any interaction is suspicious, giving high-fidelity alerts. Low-interaction honeypots emulate services, while high-interaction honeypots are real systems. They must be isolated to avoid becoming a pivot point.

Example

A fake SSH server in the DMZ logging all login attempts and commands.

Exam tip

Any traffic to a honeypot is suspicious by definition, making alerts low in false positives.

Related terms