A security administrator wants to discover zero-day attacks before they can be used on the company's network. Which of the following can the administrator use to accomplish this task?

A central repository is a storage location for data, such as logs or configurations, and does not inherently discover zero-day attacks.

A honeypot is a security mechanism designed to lure, detect, and analyze attacks by appearing to be a legitimate, vulnerable system. By attracting attackers, it allows administrators to observe their tactics and potentially discover zero-day exploits and vulnerabilities before they can be used against production systems.

A next-generation firewall (NGFW) provides advanced threat protection based on known signatures, heuristics, and behavioral analysis; while it offers some zero-day protection through sandboxing, its primary role is not proactive discovery like a honeypot.

An evil twin is a type of malicious access point that mimics a legitimate one to trick users and steal credentials or data, serving as an attack vector rather than a defense mechanism for discovering zero-day threats.