Which of the following descriptions of the Anti-DDoS solution networking mode are correct? (Multiple choice)

Question

Options

• AStraight-line deployment is simple, and it is connected in series in the network, so there is no
• BIn a bypass deployment network, traffic does not pass through the cleaning center by default.
• CBypass deployment supports dynamic traffic diversion to draw traffic to the cleaning center
• DBypass deployment can draw traffic to the cleaning center for detection and cleaning through

• A
  23% (7)
• B
  77% (23)

Explanation

Options B, C, and D are correct because they accurately describe bypass (out-of-path) deployment: traffic flows normally without touching the cleaning center until an attack is detected, at which point dynamic traffic diversion (via BGP routing changes or policy-based routing) pulls traffic to the cleaning center for scrubbing before returning it to the normal path.

Option A is incorrect because straight-line (inline) deployment places the cleaning device in series in the network, meaning all traffic - attack or normal - must pass through the cleaning center at all times, introducing potential latency and a single point of failure; this is the key trade-off that makes bypass deployment preferable in many architectures.

Memory tip: Think of bypass as a "fire station" model - traffic drives past normally, but when an alarm sounds (attack detected), it gets rerouted through the station for treatment. Inline (straight-line) is the "toll booth" model - every car must stop, every time, attack or not.

No community discussion yet for this question.