Comprehensive and Detailed Explanation From Cisco SP Security Knowledge Cisco Always-On Cloud DDoS Protection is a cloud-based, carrier-grade security service used by service providers to protect customers from volumetric and application-layer DDoS attacks.
Its core protection mechanism is the use ofglobal scrubbing centers, which:
* Receive diverted attack traffic
* Scrub (clean) malicious packets
* Forward clean traffic back to the customer
* Use behavioral analysis and real-time detection
* Protect against volumetric, TCP state-exhaustion, and application-layer attacks Why other answers are incorrect:
* Load balancing (A)doesnotmitigate DDoS attacks; it distributes traffic across servers.
* Botnet zombies (B)aresourcesof DDoS attacks, not protection.
* Traffic mirroring (C)is used for analysis and monitoring, not active DDoS protection.