The U.S. Has Cyberattack Options, But What Would Retaliation Look Like?