John works as a Security Administrator for NetPerfect Inc. The company uses Windows-based systems. A project has been assigned to John to track malicious hackers and to strengthen the company's…

A honeypot is a security resource whose value lies specifically in being probed, attacked, or compromised - it mimics a legitimate production system to lure malicious actors. By appearing to be the company's main server while actually being a monitored decoy, John's system fits the honeypot definition exactly. All activity on a honeypot is by definition suspicious, making it an effective tool for tracking attacker behavior and tactics.

Honeytokens are fake data artifacts (credentials, files, records) embedded in real systems to detect unauthorized access, not full decoy systems designed to simulate an entire server.

An Intrusion Detection System (IDS) passively monitors real network traffic or system activity for known attack signatures and does not act as a decoy or fake server.

A bastion host is a hardened, intentionally exposed server that provides a controlled gateway into a network, not a deceptive decoy designed to mislead attackers.