Question

Which of the following do not comes under network layer DoS flooding?

(a) DNS amplification

(b) UDP flooding

(c) DNS query flooding

(d) NTP Amplification

I had been asked this question in homework.

The origin of the question is Attack Vectors topic in section Understanding Attack Vectors of Cyber Security

Answer 1

The correct answer is:

(c) DNS query flooding

DNS query flooding typically targets the application layer (Layer 7) because it involves overwhelming DNS servers with excessive queries, specifically aimed at the DNS service. While it can lead to a denial of service, it is not categorized as a network layer (Layer 3) DoS flooding attack.

The other options —

• DNS amplification
• UDP flooding
• NTP amplification
  are all examples of network layer (Layer 3) flooding attacks, where the aim is to overwhelm the network infrastructure by sending large amounts of data, often leveraging misconfigured services like DNS or NTP.