DOS attacks. Which of the following is most useful against DOS attacks?

SPI maintains a dynamic state table of all active connections and validates that each incoming packet belongs to a legitimate, established session. This enables the firewall to detect and block DoS patterns such as SYN floods, UDP floods, and spoofed packets that cannot be matched to any valid connection state entry.

A distributive firewall improves security coverage across a network but does not inherently provide the connection-state tracking mechanism needed to specifically counter DoS flood traffic.

A honeypot is a decoy system used to lure and study attackers, not a tool that actively blocks or mitigates DoS traffic directed at production systems.

An internet bot is an automated software agent and is not a defensive security technology used to counter DoS attacks.