Which solution can be used to emulate computer services, such as mail and ftp, and to capture information related to logins or actions?

A firewall filters and controls network traffic based on rules but does not emulate services or capture attacker behavior.

A honeypot is a decoy system designed to mimic real network services such as SMTP, FTP, and HTTP. It records all interaction attempts including login credentials and commands issued, providing threat intelligence without exposing production systems.

A core server is a legitimate production server providing real services, not a deception tool designed to trap or monitor attackers.

A Layer 4 switch forwards traffic based on TCP/UDP port information and has no capability to emulate application services or log attacker actions.