James wants to implement certain control measures to prevent denial-of-service attacks against the organization.

Implementing a honeypot in the Demilitarized Zone (DMZ) can be an effective control measure against denial-of-service (DoS) attacks. A honeypot is a decoy system designed to attract attackers and divert them from legitimate targets. By deploying a honeypot in the DMZ, James can monitor and analyze incoming traffic to identify and mitigate DoS attacks. This proactive security measure allows the organization to detect and respond to malicious activities before they impact critical systems and services.

References: The Certified Network Defender (CND) course by EC-Council includes strategies for defending against DoS attacks, which cover the use of honeypots as a part of a layered security approach1. Additionally, industry best practices suggest that honeypots can serve as an early warning system and a means to study attacker behavior, which aligns with the objectives of the CND curriculum2.