Exam CISM topic 1 question 1084 discussion

Answer is B. Multiple and redundant paths. Because DDoS attacks aim to flood and overwhelm systems or networks with traffic from many sources. The best defense is to have resilience and redundancy built into your network architecture. Multiple and redundant paths (like through CDNs, load balancers, and geographically dispersed servers) help absorb or reroute malicious traffic, keeping services up. Regarding D.Well-configured routers and firewalls. This is an expected basic line of defense, especially with access control lists (ACLs) or rate-limiting. But they can be also overwhelmed in large-scale DDoS attacks without the redundancy and capacity offered by option B.

Best way is to have multiple and redundant path for mitigating DDOS

It can be a well-defense layered strategy

Properly configured routers and firewalls can filter out malicious traffic and help mitigate the effects of a DDoS attack

D: Well-configured routers and firewalls are the best defense against distributed denial of service (DDoS) attacks. These network security devices can help filter and block malicious traffic, manage network traffic more effectively, and mitigate the impact of DDoS attacks by controlling and limiting the volume of incoming traffic.