Application-layer DDoS attacks target specific applications or services, such as HTTP floods or DNS amplification. Below is an analysis of each option:
* AntiDDoS : This product is specifically designed to detect and mitigate DDoS attacks, including application-layer attacks. It provides real-time traffic analysis and automated mitigation capabilities.
* FireHunter : This is a sandbox solution used for detecting advanced threats and malware. It is not designed to defend against DDoS attacks.
* USG6000E : This is a next-generation firewall that provides basic DDoS protection but lacks the specialized capabilities of AntiDDoS for large-scale attacks.
* HiSec Insight : This is a security analytics platform that provides visibility into threats and vulnerabilities. While it can help identify DDoS activity, it does not actively mitigate attacks.
Thus, the correct answer is A , as AntiDDoS is the best-suited product for defending against application-layer DDoS attacks.
References:
* Huawei AntiDDoS Solution Overview, HCSA-Presales-IP Network Documentation.