CISSP Practice Question: As a security administrator, you are tasked with implementing a robust security…

Correct Answer: A. A. To detect and deceive attackers by setting up a decoy system to lure them away from critical assets

Explanation (CISSP Manager Logic):

Honeypots act as strategic deception tools that divert adversaries from production systems while providing early warning of unauthorized activity. They offer high-fidelity threat intelligence because any interaction with a decoy is inherently suspicious, allowing managers to study attacker techniques without risking actual business data.

By implementing this solution, you:

• Divert malicious actors away from high-value organizational assets.
• Reduce false positives by identifying unauthorized lateral movement.
• Gather actionable intelligence on specific tactics used against your network.

While the other options are relevant, they fall short because:

• B: This describes the restrictive filtering functions of a firewall or access control list.
• C: This refers to cryptographic controls used to ensure the confidentiality of data in transit.
• D: This describes Identity and Access Management (IAM) processes for verifying legitimate user credentials.

Think like a manager:

Prioritize defense-in-depth strategies that increase the adversary's cost of attack. Use deception to gain visibility into attacker intent while buying time for incident responders to contain threats.