Select the key reasons F5 is able to handle DNS DDoS attacks so effectively? Select two.

Guaranteeing that a DDoS attack will never succeed is an overstatement; F5 provides mitigation and resilience mechanisms but cannot promise absolute prevention of every attack.

High-performance DNS processing is an enabling characteristic of F5 hardware and software, but it is not itself the key mechanism - the ability to answer queries directly is what makes that performance meaningful during an attack.

BIG-IP DNS (formerly GTM) can act as an authoritative DNS resolver using DNS Express, loading zone data locally and answering queries directly from the BIG-IP device without forwarding requests to backend DNS servers, absorbing large attack volumes before they reach protected infrastructure.

Claiming GTM completely stops all DNS DDoS attacks is an absolute and inaccurate statement; GTM provides powerful mitigation capabilities but cannot guarantee 100% prevention of every possible attack scenario.

F5's combination of direct query answering, high-throughput DNS processing, and intelligent rate limiting ensures DNS service remains continuously available during volumetric DDoS attacks, so customers effectively never face a DNS outage as a result of such attacks.