While working as an intern for a small business, you have been tasked with managing the company's web server. The server is being bombarded with requests, and the company's website is intermittently g

ISPs have specialized equipment, infrastructure, and expertise to detect, identify, and mitigate large-scale DDoS attacks at their network edge, often before the traffic reaches the client's infrastructure. They can implement traffic filtering, scrubbing services, or rerouting to absorb and clean malicious traffic more effectively than on-premise solutions for volumetric attacks.

Installing a newer version of server software is unlikely to mitigate a DDoS attack, which is primarily a network-level or resource exhaustion issue, and could introduce further instability during an active attack.

Implementing IP address whitelisting is impractical and ineffective for a public-facing website suffering a DDoS attack, as legitimate users would be blocked, and attackers frequently use spoofed or vast numbers of IP addresses.

Increasing the server's bandwidth might temporarily delay the impact but will not stop a large-scale DDoS attack, as attackers can typically generate traffic volumes far exceeding typical server capacities.