Question

During a security review, an IS auditor notes that the organization has deployed an isolated system that mimics production servers but contains only fabricated data and is closely monitored. No legitimate business process uses this system. What is the PRIMARY purpose of this control?

Accepted Answer

To detect, divert, and study unauthorized access attempts and attacker techniques

Answer

To provide a redundant failover target that maintains availability during an outage

Answer

To load-balance production traffic and improve system response times

Answer

To store encrypted backups of production data in a segregated location