Which resilience strategy increases attack costs by provisioning multiple controls, technologies, vendors, and crypto implementations?

Which resilience strategy increases attack costs by provisioning multiple controls, technologies, vendors, and crypto implementations?

• A. Deception and disruption technologies
• B. Geographic dispersion
• C. Platform diversity
• D. Honeypots

Answer: (D)

Deception-based resilience targets attacker effort by presenting convincing decoys that mimic real assets. Honeypots are decoy systems designed to attract intruders, appear legitimate, and lure them into interacting with fake services or data. By provisioning multiple honeypots across different platforms, technologies, vendors, and crypto configurations, you force attackers to spend additional time and resources probing each target to determine whether it’s real or a decoy. This increases the cost and effort required to progress, delays attackers, and can provide early detection as they engage with the traps. While other strategies like geographic dispersion or platform diversity contribute to resilience in different ways (redundancy, reach, and failure tolerance), they don’t inherently raise attacker costs through misdirection and decoys as honeypots do.

Deception-based resilience targets attacker effort by presenting convincing decoys that mimic real assets. Honeypots are decoy systems designed to attract intruders, appear legitimate, and lure them into interacting with fake services or data. By provisioning multiple honeypots across different platforms, technologies, vendors, and crypto configurations, you force attackers to spend additional time and resources probing each target to determine whether it’s real or a decoy. This increases the cost and effort required to progress, delays attackers, and can provide early detection as they engage with the traps. While other strategies like geographic dispersion or platform diversity contribute to resilience in different ways (redundancy, reach, and failure tolerance), they don’t inherently raise attacker costs through misdirection and decoys as honeypots do.