Which term describes security mechanisms that redirect all malicious network traffic to a honeypot after any intrusion attempt is detected?

• A. OpenSSH
• B. Bait and switch honeypot
• C. Secure Pipes
• D. Snort_inline

Answer: (B)

redirecting malicious traffic to a decoy to study attacker behavior is a deception-based defense. The term that fits this approach is a bait and switch honeypot, where a lure (the bait) is used and, upon detecting an intrusion, traffic is redirected to a honeypot so the attacker interacts with a controlled system while real assets stay protected.

This aligns with using a decoy to attract and isolate attackers after detection, enabling observation and analysis without exposing critical resources.

OpenSSH is a secure remote login service, not a mechanism for redirecting traffic to a honeypot. Secure Pipes isn’t a standard term for this concept. Snort_inline refers to running Snort in inline mode to inspect or block traffic, not to redirect it to a honeypot.