Describe the difference between a volumetric and application-layer DDoS attack.

Volumetric attacks (like UDP floods) aim to saturate the network bandwidth, overwhelming the target's capacity. Application-layer attacks (like HTTP floods) target specific applications, exploiting vulnerabilities to consume server resources and disrupt service availability. Volumetric attacks are generally larger in scale, while application-layer attacks are more targeted and sophisticated.