Question 48

Availability

Implementing a product that offers protection against DDoS attacks directly relates to the security concept of availability. Ensuring that systems remain accessible and operational during such attacks is crucial for maintaining service continuity.

A) Availability

This option is correct because availability refers to ensuring that services are operational and accessible when needed. DDoS attacks aim to overwhelm a service, making it unavailable to legitimate users. Therefore, protective measures against DDoS attacks are fundamentally about maintaining availability.

B) Non-repudiation

Non-repudiation ensures that a party cannot deny the authenticity of their signature or the sending of a message. This concept does not directly relate to DDoS attacks, which focus on preventing service disruptions rather than verifying identity or actions.

C) Integrity

Integrity involves maintaining the accuracy and consistency of data over its lifecycle. While integrity is an important aspect of overall security, it does not specifically address the issue of service availability during DDoS attacks, which is the primary concern in this context.

D) Confidentiality

Confidentiality ensures that sensitive information is not disclosed to unauthorized individuals. This concept focuses on protecting information rather than ensuring the operational status of services during an attack, making it less relevant in the context of DDoS protection.

Conclusion

Availability is the correct answer as it directly addresses the need for systems to remain functional even in the face of disruptive DDoS attacks. The other options—non-repudiation, integrity, and confidentiality—do not pertain to the specific context of maintaining service availability during such attacks, highlighting their inadequacy in this scenario.