210-250 · Question #162
What type of attack occurs when the attacker spoofs the IP address of the victim, sending a continuous stream of small requests, which produce a continuous stream of much larger replies that are to…
The correct answer is B. amplification attack. An amplification attack is defined by the disproportionate size of the response relative to the spoofed request, multiplying effective attack volume against the victim.
Question
What type of attack occurs when the attacker spoofs the IP address of the victim, sending a continuous stream of small requests, which produce a continuous stream of much larger replies that are to be sent to the victim's IP address?
Options
- Areflection attack
- Bamplification attack
- CMITM attack
- DTrojan virus
How the community answered
(41 responses)- A2% (1)
- B88% (36)
- C2% (1)
- D7% (3)
Why each option
An amplification attack is defined by the disproportionate size of the response relative to the spoofed request, multiplying effective attack volume against the victim.
A reflection attack involves redirecting traffic toward a victim via IP spoofing but does not specifically require the response to be larger than the request; the amplification factor is the defining element being tested here.
This scenario is an amplification attack because the key distinguishing factor is the size disparity - small requests producing much larger replies - which allows the attacker to generate traffic volumes far exceeding what they send, using protocols like DNS, NTP, or SSDP as force multipliers.
A Man-in-the-Middle attack involves intercepting and potentially altering communications between two parties, not flooding a target with amplified volumetric traffic.
A Trojan virus is malware that masquerades as legitimate software to execute malicious payloads, which is unrelated to network-based flood attacks.
Concept tested: Amplification vs reflection attack differentiation
Source: https://www.cisa.gov/news-events/alerts/2014/01/17/udp-based-amplification-attacks
Topics
Community Discussion
No community discussion yet for this question.