Which option is used to flood a network to overwhelm IDS capability and generate noise?

Which option is used to flood a network to overwhelm IDS capability and generate noise?

• A. ACK bit
• B. Flooding
• C. HTTP Tunneling
• D. Post-Connection SYN

Answer: (B)

Flooding is a Denial-of-Service technique that overwhelms a network with a high volume of traffic or requests, aiming to exhaust bandwidth, processing, and memory resources—including those of an intrusion detection system. When the network and its sensors are flooded, the IDS struggles to filter noise from legitimate activity, making it harder to detect real threats. The other options describe different ideas: an ACK bit is simply a TCP acknowledgment flag, not a flooding method; HTTP tunneling wraps traffic in HTTP to bypass controls rather than to create volume; and Post-Connection SYN implies a concept related to SYN behavior but does not capture the broad flooding goal. So the term that best matches the objective of overwhelming IDS capability and generating noise is flooding.

Flooding is a Denial-of-Service technique that overwhelms a network with a high volume of traffic or requests, aiming to exhaust bandwidth, processing, and memory resources—including those of an intrusion detection system. When the network and its sensors are flooded, the IDS struggles to filter noise from legitimate activity, making it harder to detect real threats. The other options describe different ideas: an ACK bit is simply a TCP acknowledgment flag, not a flooding method; HTTP tunneling wraps traffic in HTTP to bypass controls rather than to create volume; and Post-Connection SYN implies a concept related to SYN behavior but does not capture the broad flooding goal. So the term that best matches the objective of overwhelming IDS capability and generating noise is flooding.