Which components are commonly included in an enterprise DDoS mitigation strategy?

Which components are commonly included in an enterprise DDoS mitigation strategy?

• A. Only increasing bandwidth.
• B. Traffic filtering and rate limiting, scrubbing centers, anycast, load balancing, scalable bandwidth, and anomaly detection.
• C. Disabling all external connections.
• D. Relying solely on firewalls without traffic analysis.

Answer: (B)

Mitigating DDoS effectively relies on a layered approach that can absorb traffic, differentiate legitimate requests from attack traffic, and steer clean data to your services. Traffic filtering and rate limiting stop much of the bad traffic at the edge and prevent floods from overwhelming the network. Scrubbing centers take inbound traffic and remove attack traffic before it reaches your infrastructure, delivering clean traffic onward. Anycast helps by spreading the load across multiple geographic locations, so no single path or site becomes the bottleneck. Load balancing distributes traffic across servers to prevent any one resource from becoming a point of failure, preserving service availability. Scalable bandwidth provides headroom to absorb traffic spikes, but only works well when combined with filtering and other defenses to avoid simply letting an attack ride in on the extra capacity. Anomaly detection identifies unusual traffic patterns early and can trigger automated protections or alerts for rapid response. Put together, these components form a comprehensive defense against diverse attack vectors, whereas options that rely only on more bandwidth, disable external connections, or depend solely on firewalls without traffic analysis fail to address the breadth of DDoS techniques.

Mitigating DDoS effectively relies on a layered approach that can absorb traffic, differentiate legitimate requests from attack traffic, and steer clean data to your services. Traffic filtering and rate limiting stop much of the bad traffic at the edge and prevent floods from overwhelming the network. Scrubbing centers take inbound traffic and remove attack traffic before it reaches your infrastructure, delivering clean traffic onward. Anycast helps by spreading the load across multiple geographic locations, so no single path or site becomes the bottleneck. Load balancing distributes traffic across servers to prevent any one resource from becoming a point of failure, preserving service availability. Scalable bandwidth provides headroom to absorb traffic spikes, but only works well when combined with filtering and other defenses to avoid simply letting an attack ride in on the extra capacity. Anomaly detection identifies unusual traffic patterns early and can trigger automated protections or alerts for rapid response. Put together, these components form a comprehensive defense against diverse attack vectors, whereas options that rely only on more bandwidth, disable external connections, or depend solely on firewalls without traffic analysis fail to address the breadth of DDoS techniques.