Information Security Principles and Frameworks Practice Test

Raising the cost of attack planning through deception and disruption technologies means using decoys, false signals, and misleading information to derail a threat actor’s reconnaissance. By sowing uncertainty and providing fake targets or misleading telemetry, defenders force attackers to spend more time validating findings, mapping the environment, and discerning real assets from decoys. This extra effort translates into longer planning cycles, higher resource use, and greater risk of detection, which is exactly what these techniques are designed to achieve.

Honeypots are a specific example of deception, and fake telemetry is another deception technique, both falling under the broader umbrella of deception and disruption technologies. Clustering is a data-analysis concept and not aimed at increasing attacker planning cost in this security context, so it doesn’t fit as well.