* B (Platform as a Service - PaaS): In a PaaS model, the cloud provider manages the operating system, middleware, runtime, and platform stack. The customer is only responsible for deploying and managing the application itself.
* This abstraction allows developers to focus on application logic without worrying about the infrastructure or platform details.
Other options explained:
* A (IaaS): Customer manages OS, middleware, and runtime; provider manages hardware and virtualization.
* C (SaaS): Customer simply consumes the application; all layers are managed by the provider.
* D (BMaaS): Bare Metal as a Service - customer has full control over hardware and all software layers.
-

SNMPv1 and SNMPv2c use plaintext community strings and lack built-in encryption or authentication, making them vulnerable to various attacks, including spoofing and message tampering. SNMPv3 addresses these weaknesses by introducing:
* Authentication (to prevent impersonation or "masquerade")
* Encryption (privacy)
* Message integrity
"Masquerade threats" involve an attacker pretending to be a trusted source, which SNMPv3 can prevent via cryptographic authentication mechanisms.
Although SNMPv3 does provide improved security features like integrity and privacy, it is not specifically designed to mitigate volumetric attacks like DDoS or dictionary brute-force. SNMPv3 does not inherently stop man-in-the-middle attacks unless secure key exchanges and trusted paths are fully enforced, which may require additional protocols.

Explanation:
Graphical user interface Description automatically generated with medium confidence

Comprehensive and Detailed Explanation:
* B: The IPsec anti-replay mechanism protects against packet injection and replay attacks by rejecting packets outside the anti-replay window. Increasing the anti-replay window (e.g., to 4096) allows legitimate packets with slightly reordered or delayed sequence numbers to be accepted-especially critical during bursts or with asymmetric paths.
Other options:
* A: QoS marking does not prevent replay.
* C: Tunnel keyword restrictions don't address replay attacks.
* D: Shaping affects traffic rate, not sequence validation.