Which statement about indirect attacks is true?

• A. An indirect attack floods directly from the attacker's computer.
• B. An indirect attack uses compromised hosts under the attacker's control to flood the victim.
• C. An indirect attack relies on spoofing IP addresses only.
• D. An indirect attack requires no network infrastructure.

Answer: (B)

Indirect attacks rely on using a swarm of compromised machines under the attacker's control to generate traffic toward the target. This means the flood comes from many hosts, not from the attacker’s own computer, which helps scale the attack and makes tracing harder. While IP spoofing can be used in some cases, it’s not the defining feature—it's the distribution across multiple compromised hosts that characterizes the indirect approach. The idea that no network infrastructure is required is incorrect because coordinating those many sources requires a network; and flooding from a single machine would be a direct attack, not an indirect one.