72. A malicious actor uses multiple endpoints to target a single endpoint. Which of the following describes this threat?
Answer: D
Distributed Denial of Service
A Distributed Denial of Service (DDoS) attack occurs when multiple compromised endpoints are used to overwhelm a single target endpoint, making it unavailable to legitimate users. This type of threat is specifically designed to disrupt the normal functioning of the targeted service or network.
A) On-path attack
An on-path attack, formerly known as a man-in-the-middle attack, involves an attacker intercepting communications between two parties. While this is a significant security threat, it does not involve multiple endpoints targeting a single endpoint, thus making it an incorrect option for the scenario described.
B) Structured Query Language injection
Structured Query Language (SQL) injection is a code injection technique that exploits security vulnerabilities in an application's software. This type of attack targets databases rather than using multiple endpoints to overwhelm a single target, making it irrelevant to the question context.
C) Brute-force attack
A brute-force attack involves systematically guessing passwords or encryption keys to gain unauthorized access to a system. Although it can involve multiple attempts, it does not specifically utilize multiple endpoints to target a single endpoint in the manner described in the question, rendering it incorrect.
D) Distributed Denial of Service
A Distributed Denial of Service attack is characterized by multiple compromised systems, often part of a botnet, directing a flood of traffic towards a single endpoint. This method effectively overwhelms the target, causing service disruption and confirming it as the correct answer for the scenario presented.
Conclusion
The correct answer, Distributed Denial of Service, accurately describes a situation where multiple endpoints are employed to target a single endpoint, leading to its unavailability. Other options fail to capture this specific dynamic, as they either relate to different attack methodologies or do not involve the coordinated effort of multiple systems targeting a single point of failure.