You are under a DDoS attack and you have added a deny all TCP rule to your NACL, but traffic is still coming. What could be the underlying issue?

Answer options:

A.You configured the rule number to be too low.
B.You need to add a deny rule outbound to the NACL
C.A NACL can’t protect against a DDos attacks
D.The DDoS isn’t a TCP attack

Answer D
There are different types of DDos attacks, it can also be a UDP attack.
For more information on the types of DDos attacks , please refer to the below link:
https://www.incapsula.com/ddos/ddos-attacks/