A Chief Information Security Officer (CISO) Is Concerned About the Organization's

A Chief Information Security Officer (CISO) is concerned about the organization's ability to continue business operations in the event of a prolonged DDoS attack on its local datacenter that consumes database resources. Which of the following will the CISO MOST likely recommend to mitigate this risk?

A) Upgrade the bandwidth available into the datacenter.
B) Implement a hot-site failover location.
C) Switch to a complete SaaS offering to customers.
D) Implement a challenge response test on all end-user queries.