You are responsible for security at a company that specializes in e-commerce. You realize that given the high volume of Web traffic, there is a significant chance of someone being able to breach…

A network-based IDS detects and alerts on suspicious traffic but takes no action to redirect or deceive an attacker who has breached the perimeter.

A passive IDS only monitors and generates alerts in response to detected events without actively redirecting or engaging an attacker.

A stateful packet inspection firewall enforces access control by tracking connection state and filtering traffic, but it does not redirect attackers to a decoy environment away from sensitive data.

A honeypot is a deliberately configured decoy system that mimics production resources to attract attackers and divert them away from systems containing real sensitive data. It also gives defenders visibility into attacker techniques and behavior without exposing actual assets, making it the only listed control that fulfills the redirection requirement.