You are the Administrator for a corporate network. You are concerned about denial of service attacks. Which of the following measures would be most helpful in defending against a Denial-of-Service…

Network-based antivirus detects and blocks malicious code execution, but does not mitigate DoS attacks which exploit resource exhaustion rather than malware.

A honeypot is a decoy system used to study attacker behavior and gather threat intelligence, not to actively defend against or absorb DoS traffic.

DoS attacks such as SYN floods exhaust server resources by maintaining many half-open connections. Shortening the timeout for connection attempts forces the server to release those resources sooner, limiting the attacker's ability to hold them hostage and directly reducing the attack's impact on availability.

A strong password policy prevents unauthorized authentication, but DoS attacks do not require credentials and target service availability rather than confidentiality.