A company wants to reduce the impact of a DDoS attack on its e-commerce website. Which set of measures best matches the material?

### Why this is right The course material lists traffic filtering, load balancing, cloud mitigation, and scalable infrastructure as ways to combat or absorb malicious traffic. These measures address the service-capacity problem created by a DDoS attack. ### The concept A DDoS attack attempts to overwhelm a service so legitimate users cannot access it. Traffic filtering helps manage unwanted requests, while load balancing distributes requests across available resources. Cloud mitigation and scalable infrastructure can provide additional capacity or defenses. The objective is to keep the e-commerce service available during unusually high malicious traffic. ### The other options - **B. Audit trails, cryptographic checks, and transaction-log review**: these address the reliability and integrity of records, not traffic overload. - **C. User education, email filtering, and multi-factor authentication**: these reduce phishing and account risks. - **D. Role-based permissions, peer reviews, and file version control**: these help manage file access and accidental deletion, not DDoS traffic. ### Terms - **Load balancing**: distributing incoming work across resources to help manage demand. - **Cloud mitigation**: using cloud-based resources or services to help reduce the effects of an attack. ### Remember For a traffic-flooding attack, select controls that manage, distribute, or absorb traffic.