The 911 public non-emergency web tip form is overwhelmed by concurrent POST traffic from thousands of distinct source IPs worldwide. Which term correctly describes this attack?
Select an answer to reveal the explanation.
Short Explanation
Thousands of different IPs hitting the tip form at once is a flash mob, not one guy with a megaphone. That is DDoS: many sources, one goal, service on its knees. DoS is the single-hose version; this is the hydrant farm.
Full Explanation
Distributed denial-of-service is coordinated availability damage from many distinct sources, which matches a worldwide POST flood against the 911 non-emergency tip form. Single-source DoS does not fit thousands of IPs. Account takeover requires control of a legitimate civic identity, and exfiltration is data leaving the environment — neither is shown by a form flood. Civic SOC analysts should classify the event as DDoS so mitigation (upstream filtering, WAF, capacity) and Splunk ES notables track the many-source pattern.