What is the BEST way to ensure that an intruder who successfully penetrates a network will be detected before
significant damage is inflicted?

A.
Perform periodic penetration testing

B.
Establish minimum security baselines

C.
Implement vendor default settings

D.
Install a honeypot on the network

Explanation:

Honeypots attract hackers away from sensitive systems and files. Since honeypots are closely monitored, the intrusion is more likely to be detected before significant damage is inflicted. Security baselines will only provide assurance that each platform meets minimum criteria. Penetration testing is not as effective and can only be performed sporadically. Vendor default settings are not effective.