All Questions
Networking Essentials medium

Why are UDP-based protocols (like DNA or NTP) commonly used for 'Amplification' DDoS attacks?

  1. A UDP-based protocols utilize a mandatory, high-level cryptographic encryption routine that is mathematically optimized for flooding the victim's edge-level firewall.
  2. B UDP allows for source IP spoofing (due to the lack of a handshake) and often features protocols where a small request triggers a disproportionately large response from the server.
  3. C UDP is fundamentally slower than TCP, which causes a significant backlog of unproccessed data packets that eventually clog the victim's internal switching fabric.
  4. D These protocols specifically run on port 80 and port 443, allowing the malicious traffic to bypass the vast majority of modern enterprise-level security monitoring tools.

One system design question a day, with spaced repetition so the ones you miss come back.

Get the app

Related questions