A security team wants to detect attackers who have already bypassed the perimeter and are moving through the internal network. They deploy a decoy server that mimics a legitimate database server but holds only fake data, with no legitimate business reason for any user to connect to it. Any connection attempt is logged and generates a high-priority alert. Which security concept does this deployment BEST represent?