How do you handle and mitigate a large-scale Distributed Denial of Service (DDoS) attack targeting public-facing endpoints?