which of the following is not a mitigation for MS Blaster?

According to SAFE worm mitigation, which of the following is not a mitigation for MS Blaster?

A.
CAR

B.
private VLANs

C.
NBAR

D.
sink-hole routers