Scenario: You’re a web administrator for HandlingMoreTrafficThanFacebook.com. How do you prevent a DDoS attack on the website?

How do we prevent DDoS attacks on websites which are popular and have immense traffic?