Which CLI command on the Cisco ASR 5000 will configure stateful firewall protection for subscribers

Which CLI command on the Cisco ASR 5000 will configure stateful firewall protection for
subscribers for DoS attacks?

A.
firewall attack-prevention

B.
firewall dos-protection

C.
firewall tcp-checksum-error

D.
firewall validate-ip-options