Describe the difference between a reflection attack and a amplification attack in the context of DDoS.

A reflection attack involves an attacker sending requests to a server that then responds to the original attacker, amplifying the attack's impact. An amplification attack exploits vulnerabilities in network protocols (like DNS) to generate much larger responses than the initial request, further amplifying the attack. Both contribute to overwhelming a target server's resources.