Which service is described as providing comprehensive DDoS protection offerings from an ISP or DDoS service?

• A. DDoS Prevention Offerings from ISP or DDoS Service
• B. Black Hole Filtering
• C. Passive Session Hijacking
• D. Akamai DDoS Protection

Answer: (A)

DDoS protection as a service focuses on shielding networks by routing traffic through specialized defenses provided by an ISP or a DDoS attack mitigation service. These offerings are designed to be comprehensive, handling large volumes of malicious traffic across the network, applying real-time filtering, and diverting or scrubbing harmful traffic before it reaches the target. This makes them the best fit for a description that emphasizes protection delivered from an ISP or DDoS service, since it captures the full, managed approach rather than a single technique or a specific vendor.

Black Hole Filtering describes a blunt, last-resort method that simply drops traffic by sending it to a null route, which can unintentionally block legitimate users and doesn’t provide broad, managed protection. Passive Session Hijacking is an attack technique, not a protective service. Akamai DDoS Protection is a vendor-specific solution; while it offers protection, the scenario calls for a general service category provided by an ISP or DDoS service, not a particular provider.