A Deception Landmine is endpoint software that plants decoy artifacts such as fake credentials, files, processes, or lures. Those artifacts are designed to attract attackers who are moving laterally or harvesting credentials, causing high-fidelity alerts when touched. Option C (Software agent installed on endpoints, such as desktops or laptops on a network. These agents deploy decoy credentials, files, processes, and lures to other decoys at endpoints) is correct because a Landmine is an endpoint agent that deploys deception lures from the endpoint.
Why the other options are incorrect:
A. Agentless plug-in installed on endpoints, such as desktops or laptops on a network. These plug-ins deploy decoy credentials, files, processes, and lures to other decoys at endpoints: Deception uses decoys, fake credentials, lures, and traps to expose intruders who are exploring the environment.
B. Software agent installed on a centralized server in datacenter or in cloud. The agents running in the server deploy decoy credentials, files, processes, and lures to other decoys at endpoints: Deception uses decoys, fake credentials, lures, and traps to expose intruders who are exploring the environment.
D. Agentless plug-in installed on endpoints, such as desktops or laptops on a network. These plug-ins auto rotates decoy credentials, files, processes, and lures to other decoys at endpoints: Deception uses decoys, fake credentials, lures, and traps to expose intruders who are exploring the environment.
