Which of the following situations is an example of a reflected DDoS attack?

A

An attacker spoofs IP addresses of legitimate web servers to send traffic toward a vulnerable target

B

An attacker replays credentials they have captured in order to gain unauthorized access to a system

C

An attacker sends a small query to a server that results in a large response

D

An attacker gains access to directories outside of a web server's public folder