You are an Administrator for a network at an investment bank. You are concerned about individuals breeching your network and being able to steal data before you can detect their presence and shut…

A strong password policy strengthens authentication barriers but provides no mechanism for detecting or slowing an attacker who has already compromised credentials and is active on the network.

A honeypot is a deliberate decoy system placed inside the network to attract attackers, giving security teams early warning of a breach and the ability to observe attacker techniques in real time. Unlike perimeter controls, a honeypot provides detection capability after an attacker has already gained access, which directly addresses the concern of data theft before detection. Any interaction with the honeypot is inherently suspicious, generating high-fidelity alerts with very low false-positive rates.

A strong firewall enforces perimeter access controls but offers no visibility or detection capability for lateral movement or data exfiltration by an attacker already inside the network.

Network-based antivirus detects known malware signatures in transit but does not address the detection of a skilled attacker performing manual, living-off-the-land intrusion techniques.