What command can you use to protect a router from TCP SYN-flooding attacks?

What command can you use to protect a router from TCP SYN-flooding attacks?

A.
ip igmp snooping

B.
rate-limit input <bps> <burst-normal> <burst-max>

C.
ip tcp intercept list < access-list>

D.
police <bps>

E.
ip dns spoofing <ip-address>