1) An IDS is designed to only provide an alert about a potential incident, which enables a security operations center (SOC) analyst to investigate the event and determine whether it requires further action. An IPS, on the other hand, takes action itself to block the attempted intrusion or otherwise remediate the incident.
2) Sending an alarm to the administrator (as would be seen in an IDS)
Dropping the malicious packets.
Blocking traffic from the source address.
Resetting the connection.
Configuring firewalls to prevent future attacks.
3)A honeypot is a cybersecurity mechanism that uses a manufactured attack target to lure cybercriminals away from legitimate targets. They also gather intelligence about the identity, methods and motivations of adversaries.