Which of the following controls BEST mitigates the impact of a distributed denial of service (DDoS) attack against the controller in a software-defined network (SDN)?

A. Implementing multiple physical SDN controllers
B. Relocating virtualized network functions to physical infrastructure
C. Hardening the operating system that hosts the SDN controller
D. Implementing configuration management for SDN controllers