Computer Hacking Forensic Investigator (CHFI v10) — Question 58

Lance wants to place a honeypot on his network. Which of the following would be your recommendations?

Answer options

• A. Use a system that has a dynamic addressing on the network
• B. Use a system that is not directly interacting with the router
• C. Use it on a system in an external DMZ in front of the firewall
• D. It doesn't matter as all replies are faked

Correct answer: C

Explanation

The correct choice is C because placing a honeypot in an external DMZ allows it to attract potential attackers while isolating the rest of the network. Option A is unsuitable as dynamic addressing can lead to unpredictability. Option B is also not ideal since honeypots should be accessible for interaction. Option D is incorrect because genuine responses are important for effective honeypot functionality.