Which solution can be used to emulate computer services, such as mail and ftp, and to capture information related to logins or actions?

A firewall enforces access control rules to permit or deny traffic - it does not emulate services or capture attacker actions beyond logging connection attempts.

A honeypot intentionally mimics legitimate network services to lure attackers, logging all interaction including login attempts, credentials used, and commands executed. This provides threat intelligence and early warning of intrusion attempts without exposing production systems. Tools like Honeyd or specialized appliances can emulate mail, FTP, HTTP, and other services convincingly.

A 'core server' is a generic infrastructure term referring to a central production server, not a deception-based security tool.

A Layer 4 switch forwards traffic based on transport-layer port and IP information - it has no capability to emulate application services or capture attacker behavior.