Which term describes a network comprised of multiple decoy systems designed to lure attackers?

• A. Honeynet
• B. Honeypot
• C. Decoy Network
• D. Trap Network

Answer: (A)

The concept here is using decoy systems to observe attacker behavior. When you have several decoy hosts connected as a network to lure and study attackers, that setup is called a honeynet. A honeynet provides a broader, more realistic environment than a single decoy because it imitates an entire network, allowing you to monitor how attackers probe, move laterally, and interact with multiple services across multiple hosts. This collection of decoys enables richer data on attacker techniques and tools, helping defenders learn and improve defenses without risking real systems.

A honeypot is just a single decoy system, not a network. The terms “Decoy Network” and “Trap Network” aren’t standard labels for a coordinated group of decoys and don’t specifically describe a network of multiple decoy systems.