A telecommunications provider in Toronto operates a monitoring platform that analyzes inbound traffic streams during...

The correct answer is D. Wavelet-Based Signal Analysis.

The scenario describes converting traffic measurements into signal components and analyzing them across frequency ranges. This is the defining concept of wavelet-based signal analysis.

CEH-aligned DDoS detection material states that Wavelet-Based Signal Analysis is an automated process for detecting DoS/DDoS attacks by analyzing input signals. It is used to detect volume-based anomalies, evaluate traffic, and filter it at a specific scale, while adaptive threshold techniques are used to detect DoS attacks .

Option A. Traffic Pattern Analysis is too general and does not specifically describe signal decomposition.

Option B. Sequential Change-Point Detection is incorrect because that technique identifies the point where behavior statistically changes, usually with CUSUM-style logic.

Option C. Activity Profiling is incorrect because it compares activity against average traffic rates or baseline behavior.

Option D. Wavelet-Based Signal Analysis is correct because the platform decomposes traffic into signal/frequency components to detect anomalies.

Therefore, the best answer is D. Wavelet-Based Signal Analysis.