SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/secplus-honeypot-decoy

A server set up only to attract attackers so defenders can study them is called what?

Honeypot, a decoy designed to be attractive to intruders.

Start playing free

  1. A bastion host
  2. A honeypot ✔
  3. A jump server

Why: Nobody legitimate has a reason to use a honeypot, so any traffic to it is suspicious. Defenders can watch what attackers try without risking real data.

Huh, didn't know that: NIST SP 800-53 control SC-26 is titled Decoys and calls for components designed to be targets of attacks for detecting, deflecting and analyzing them.

The dad joke
Why did the bear love the server? It smelled like honey.
Like this card?
Play the game

References

Answer: A honeypot. Nobody legitimate has a reason to use a honeypot, so any traffic to it is suspicious. Defenders can watch what attackers try without risking real data.

  1. NIST CSRC Glossary: honeypot csrc.nist.gov/glossary/term/honeypot
    designed to be attractive to potential crackers and intruders
    Checked 2026-10-10.
  2. NIST SP 800-53 Rev. 5, Security and Privacy Controls nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf
    Include components within organizational systems specifically designed to be the target of malicious attacks
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyEncrypting a laptop's files mainly protects which part of the CIA triad?Security & PrivacyA file's hash value no longer matches after someone edits the file. Which CIA property was affected?Security & PrivacyA flood of fake traffic knocks a website offline. Which CIA property does this attack target?

That's stuff everyone should know.