Which honeypot type emulates a real SSH environment and verifies login attempts against an internal list of fake users?

Which honeypot type emulates a real SSH environment and verifies login attempts against an internal list of fake users?

• A. Kojoney2
• B. Medium-Interaction Honeypots
• C. High-Interaction Honeypots
• D. Email Honeypots

Answer: (B)

Medium-interaction honeypots are designed to resemble real SSH services closely enough for attackers to attempt logins, while keeping the host controlled. They present a believable SSH login prompt and verify login attempts against an internal list of fake users, so credentials can be collected without granting real access. This level provides enough realism to study attacker behavior and credential patterns while avoiding the risks of giving a real system to an attacker. The other options don’t fit this scenario: high-interaction would allow near-full access to a real system, which increases risk; email honeypots focus on email protocols rather than SSH; and a specific tool like Kojoney is an implementation detail rather than the general category described.

Medium-interaction honeypots are designed to resemble real SSH services closely enough for attackers to attempt logins, while keeping the host controlled. They present a believable SSH login prompt and verify login attempts against an internal list of fake users, so credentials can be collected without granting real access. This level provides enough realism to study attacker behavior and credential patterns while avoiding the risks of giving a real system to an attacker. The other options don’t fit this scenario: high-interaction would allow near-full access to a real system, which increases risk; email honeypots focus on email protocols rather than SSH; and a specific tool like Kojoney is an implementation detail rather than the general category described.