Which IPS signature trigger category uses a decoy server to divert attacks away from production devices?

Which IPS signature trigger category uses a decoy server to divert attacks away from production devices?

• pattern-based detection
• anomaly-based detection
• honey pot-based detection
• policy-based detection
  

  Answers Explanation & Hints: Honey pot-based detection uses a decoy server to attract attacks and to divert attacks away from production devices. Use of a honey pot can give administrators time to analyze incoming attacks and malicious traffic patterns to tune sensor signatures.