During property-tax payment week, attackers use AI to pick peak hours and high-value endpoints for a botnet flood against the portal. Which AI-enhanced attack planning activity is this?

AI-assisted DDoS planning can optimize timing and targeting by learning when civic services face peak demand—such as property-tax payment week—and which high-value endpoints will maximize disruption if flooded. Using AI to pick those hours and endpoints for a botnet flood against the tax portal exemplifies attacker capacity planning aimed at maximum resident impact and operational pain. AI-crafted spear phishing aimed at property-tax account holders is social engineering that delivers deceptive messages to steal credentials, not a botnet flood timed to civic peak demand. AI-driven vulnerability scanning to identify unpatched portal software flaws is reconnaissance for exploitation, not DDoS targeting that selects flood hours and high-value endpoints. AI-optimized credential stuffing using large sets of stolen resident logins is authentication abuse against login portals, unrelated to AI-optimized flood timing. Exam caveat: AI choosing peak civic hours and critical endpoints for botnet floods is AI-assisted DDoS targeting—contrast with AI-crafted spear phishing, AI-driven vulnerability scanning, and AI-optimized credential stuffing. Operational check: pre-stage WAF/CDN capacity and rate limits before known payment peaks, rehearse traffic-surge playbooks with finance and communications, monitor for reconnaissance of high-value portal endpoints, and keep authorized AI-crafted phishing exercises clearly scoped and consent-based so they are not confused with botnet flooding.