In a reflected DoS attack, which statement about the direction of responses is correct?

• A. The responses are sent to the attacker
• B. The responses are dropped
• C. The responses are redirected to a third party
• D. The responses are sent to the victim

Answer: (D)

In a reflection attack, the attacker uses spoofed requests to third‑party servers that will reply to the original source of the request. The source is the victim, so the servers send their responses to the victim’s address. The attacker never actually receives those responses; they rely on many reflectors to flood the victim with traffic. That’s why the correct statement is that the responses are sent to the victim. The other options don’t fit the mechanism: sending responses to the attacker wouldn’t achieve a flood via reflection, dropping the responses would prevent the amplification, and redirecting to a third party changes who is actually being attacked.