A company's CMS service runs on an IaaS cluster on a public cloud and is frequently targeted by DDoS. Which of the following should a cloud engineer monitor to identify attacks?

Pick an option to reveal the answer.