By flooding the DHCP server with requests using spoofed MAC addresses, the tester exhausted the available IP lease pool. This prevents legitimate devices from obtaining network configurations, which is characteristic of a DHCP starvation attack.

The analyst is performing boolean-based blind SQL injection by using true and false conditions and observing differences in application responses to infer how the backend database processes the injected logic.

Spimming means spam delivered through instant messaging. When the messages contain deceptive identity claims, urgent account prompts, or malicious links, the same channel can be used for phishing and credential theft. The defining clue is that the repeated unsolicited messages appeared exclusively in an internal real-time collaboration system rather than through email, SMS, or telephone calls.
Attackers may compromise legitimate collaboration accounts or create convincing look-alike identities. Real- time notifications encourage immediate reactions, while users may trust messages that appear to come from colleagues or internal support personnel. Links can lead to fraudulent authentication portals, malware downloads, or OAuth-consent attacks. Recommended controls include restricting communication from unknown or external accounts, scanning links and attachments, enforcing multifactor authentication, monitoring impossible logins, and providing a simple mechanism for reporting suspicious messages.
Whaling targets senior executives or other high-value individuals; the scenario instead describes messages distributed to multiple employees. Spear phishing is highly targeted toward selected recipients, normally using personalized information, but the repeated collaboration-platform spam is more specifically classified as spimming. Vishing uses voice calls or voice messages. The FTC's phishing guidance confirms that deceptive messages commonly use urgent stories and malicious links, while the instant-messaging delivery channel distinguishes this case as spimming.

A Pulse Wave attack is a type of DDoS attack that uses a botnet to send high-volume traffic pulses at regular intervals, typically lasting for a few minutes each. The attacker can adjust the frequency and duration of the pulses to maximize the impact and evade detection. A Pulse Wave attack can exhaust the network resources of the target, as well as the resources of any DDoS mitigation service that the target may use. A Pulse Wave attack can also conceal the attacker's identity, as the traffic originates from multiple sources that are part of the botnet. A Pulse Wave attack can bypass simple defensive measures, such as IP-based blocking, as the traffic can appear legitimate and vary in source IP addresses.
The other options are less effective or feasible for the attacker's objectives. A protocol-based SYN flood attack is a type of DDoS attack that exploits the TCP handshake process by sending a large number of SYN requests to the target server, without completing the connection. This consumes the connection state tables on the server, preventing it from accepting new connections. However, a SYN flood attack can be easily detected and mitigated by using SYN cookies or firewalls. A SYN flood attack can also expose the attacker's identity, as the source IP addresses of the SYN requests can be traced back to the attacker. An ICMP flood attack is a type of DDoS attack that sends a large number of ICMP packets, such as ping requests, to the target server, overwhelming its ICMP processing capacity. However, an ICMP flood attack from a single IP can be easily blocked by using IP-based filtering or disabling ICMP responses. An ICMP flood attack can also reveal the attacker's identity, as the source IP address of the ICMP packets can be identified. A volumetric flood attack is a type of DDoS attack that sends a large amount of traffic to the target server, saturating its network bandwidth and preventing legitimate users from accessing it. However, a volumetric flood attack using a single compromised machine may not be sufficient to overwhelm the network bandwidth of a major online retailer, as the attacker's machine may have limited bandwidth itself. A volumetric flood attack can also be detected and mitigated by using traffic shaping or rate limiting techniques. References:
* Pulse Wave DDoS Attacks: What You Need to Know
* DDoS Attack Prevention: 7 Effective Mitigation Strategies
* DDoS Attack Types: Glossary of Terms
* DDoS Attacks: What They Are and How to Protect Yourself
* DDoS Attack Prevention: How to Protect Your Website