What is an effective countermeasure for mitigating DDoS attacks?

Question

Options

• AImplementing rate limiting
• BUsing strong encryption
• CDeploying antivirus solutions
• DEnabling geofencing

• A
  93% (56)
• B
  2% (1)
• C
  3% (2)
• D
  2% (1)

Explanation

Rate limiting (A) directly counters DDoS attacks by capping the number of requests a client can send within a time window, preventing any single source from overwhelming server resources - this is a core DDoS mitigation technique used by firewalls, load balancers, and CDNs.

B (strong encryption) protects data confidentiality in transit but does nothing to reduce request volume - an attacker can flood you with encrypted requests just as easily. C (antivirus) defends against malware on endpoints, not volumetric network attacks. D (geofencing) restricts access by geography and can reduce attack surface in some scenarios, but it's not a reliable DDoS countermeasure since botnets span the globe and attackers can route through permitted regions.

Memory tip: Think "DDoS = too much traffic" - you need something that limits traffic. Rate limiting is the only choice with the word "limiting" baked into its purpose.

No community discussion yet for this question.