72. A malicious actor uses multiple endpoints to target a single endpoint. Which of the following describes this threat?

Answer: D

Explanation:

Distributed Denial of Service

A malicious actor using multiple endpoints to target a single endpoint is indicative of a Distributed Denial of Service (DDoS) attack. This type of attack aims to overwhelm the targeted system with traffic from numerous sources, rendering it unable to respond to legitimate requests.

A) On-path attack

An on-path attack does not involve multiple endpoints targeting a single endpoint. Instead, it refers to an attacker intercepting communications between two parties, potentially to eavesdrop or manipulate the data being transmitted. Thus, this option does not accurately describe the scenario.

B) Structured Query Language injection

Structured Query Language (SQL) injection is a type of attack that targets databases by inserting malicious SQL queries through input fields. This method does not involve multiple endpoints targeting a single endpoint; rather, it focuses on exploiting vulnerabilities in database interactions, making this option incorrect.

C) Brute-force attack

A brute-force attack involves systematically trying all possible combinations to gain unauthorized access to a system, such as passwords. While it may use multiple attempts, it does not specifically describe the scenario of multiple endpoints targeting a single endpoint as in a DDoS attack.

D) Distributed Denial of Service

A Distributed Denial of Service (DDoS) attack perfectly encapsulates the scenario where multiple endpoints are used to overwhelm a single target endpoint. By flooding the target with traffic from various sources, the attacker aims to incapacitate the service, making this the correct choice.

Conclusion

The correct answer, Distributed Denial of Service, distinctly describes the method of using multiple endpoints to attack a single endpoint. All other options fail to align with the nature of the threat, as they either describe different types of attacks or focus on distinct methodologies not applicable to the scenario presented.