In a smurf flood DoS attack, the multiplier effect can occur because multiple ICMP requests are responded to by a single host.

• A. True
• B. Not applicable
• C. Cannot be determined
• D. False

Answer: (D)

Smurf amplification happens because one ICMP Echo Request sent to a broadcast address, with the victim’s IP as the source, prompts many hosts on that broadcast domain to reply to the victim. Each responsive host sends an ICMP Echo Reply back to the spoofed address, so the victim is overwhelmed by a flood of replies. The multiplier effect, therefore, comes from numerous hosts responding to a single request, not from a single host responding to multiple requests. The statement is false because the amplification occurs through many hosts replying to one request, not through one host replying to many requests.