Free CompTIA Security+ SY0-701 Practice Question

An Amplified DDoS attack relies on the use of public network services to enlarge the volume of traffic directed at the victim's network. The attacker sends requests to these services with spoofed source IP addresses so that the large responses are redirected to the victim's server, thus amplifying the attack traffic without the need for a botnet. Reflected attacks also use spoofed IP addresses, but the amplification factor is not their defining characteristic. A SYN flood attack does not inherently use amplification techniques; it primarily exhausts resources by initiating numerous incomplete TCP connection requests. Similarly, a Ping flood is a straightforward attack that sends numerous ICMP Echo request packets to overwhelm the target but does not involve amplification through public network services.