Which of the following is the BEST defense against distributed denial of service (DDoS) attacks?

A. Multiple and redundant paths
B. Well-configured routers and firewalls
C. Regular patching
D. Intruder-detection lockout