Exam SY0-701 topic 1 question 527 discussion

Actual exam question from CompTIA's SY0-701

Question #: 527
Topic #: 1

A security analyst created a fake account and saved the password in a non-readily accessible directory in a spreadsheet. An alert was also configured to notify the security team if the spreadsheet is opened. Which of the following best describes the deception method being deployed?

A. Honeypot
B. Honeyfile
C. Honeytoken
D. Honeynet

Show Suggested Answer

Suggested Answer: C 🗳️

by LiverpoolLegend at Feb. 7, 2025, 3:09 a.m.

Comments

Submit Cancel

Teliyah21

3 weeks, 4 days ago

Selected Answer: B

B it is a honey file

upvoted 2 times

...

drew81

3 weeks, 5 days ago

Selected Answer: C

Honeytoken refers to any decoy data or token inserted into a system (fake user account, data base record, or any other type of digital bait. When interacted with, indicates a compromise or unauthorized access.

upvoted 2 times

...

Commando9800

1 month ago

Selected Answer: B

The trigger happens when the spreadsheet is opened, so its a Honeyfile

upvoted 2 times

...

test_arrow

2 months ago

Selected Answer: C

C. Honeytoken Explanation: ✔ A honeytoken is a decoy piece of data (e.g., fake credentials, database records, or files) designed to detect unauthorized access. ✔ In this scenario, the analyst created a fake account (credentials) and stored them in a hidden spreadsheet, setting up an alert when accessed. ✔ This helps identify malicious activity if an attacker discovers and attempts to use the credentials. Why not the other options? A. Honeypot – A decoy system or server designed to lure attackers, not a single credential or file. B. Honeyfile – A fake document (e.g., a sensitive-looking spreadsheet or PDF), whereas this scenario is about credentials rather than just a document. D. Honeynet – A network of multiple honeypots, not a single deception mechanism like a honeytoken.

upvoted 4 times

...