Which approach is crucial in defending against DoS/DDoS attacks?

Question

Options

• AIncreasing the complexity of system passwords
• BImplementing network segmentation
• CRegularly backing up data
• DEstablishing comprehensive monitoring and alerting systems

• A
  3% (1)
• B
  3% (1)
• C
  8% (3)
• D
  86% (31)

Explanation

Comprehensive monitoring and alerting systems (D) are the cornerstone of DoS/DDoS defense because they enable real-time detection of traffic anomalies, triggering rapid response before an attack overwhelms resources - without visibility, you can't react. Password complexity (A) addresses authentication threats, not availability attacks, which don't require credentials to execute. Network segmentation (B) limits lateral movement after a breach but doesn't mitigate volumetric or protocol-based flood attacks targeting exposed services. Data backups (C) support recovery from data loss or ransomware, not service availability under traffic floods.

Memory tip: Think "Detect to Defend" - DoS/DDoS attacks are about overwhelming availability, so your primary weapon is seeing the attack coming. Monitoring = visibility = response time.

No community discussion yet for this question.