In a reflected DoS attack, the responses arrive at the victim, not at the attacker.

• A. They are sent to the attacker
• B. They are directed to a third party
• C. They are directed to the victim
• D. They are dropped

Answer: (C)

In a reflection-based attack, the attacker tricks legitimate services into replying to the victim by forging the request’s source address to be the victim’s IP. The response from those services goes to the source address seen in the request, which is the victim, not the attacker. That’s why the burst of responses arrives at the victim, amplifying the traffic they must handle. The other options don’t fit because the reply path follows the forged source address in the request, so it isn’t sent to the attacker or to a third party by default, and it isn’t simply dropped.