DDoS prevention offerings from ISPs surgically remove DDoS attacks while letting legitimate traffic flow. What is the primary benefit?

• A. It blocks all traffic
• B. It surgically removes network and application layer DDoS attacks while letting legitimate traffic flow
• C. It accelerates DDoS traffic
• D. It requires a VPN

Answer: (B)

DDoS protection from an ISP focuses on maintaining service availability by filtering attack traffic at the edge and letting legitimate users reach the service. The benefit described fits how these protections work: traffic is scrubbed to remove malicious requests and floods, while legitimate traffic is forwarded to the target, so services stay online during an attack. This selective filtering is why it’s the best choice—it preserves access for real users without blanketing or blocking all traffic. The other options describe outcomes that don’t fit: blocking everything would cut off legitimate users, accelerating attack traffic would worsen the problem, and requiring a VPN isn’t the primary benefit of ISP-based DDoS protection.