Tell me about a time you had to explain the difference between a legitimate traffic spike and an attack.