What two are examples of UDP-based attacks? (Choose two.)

A SYN flood is a TCP-based attack that exploits the TCP three-way handshake by sending unanswered SYN packets to exhaust server connection tables - it depends entirely on TCP state tracking, not UDP.

SQL Slammer (also known as Sapphire) was a worm that exploited a buffer overflow in Microsoft SQL Server 2000 and propagated entirely over UDP port 1434 using small, rapid packets that caused widespread network congestion globally in 2003.

UDP flooding is a volumetric DoS attack that sends large numbers of UDP packets to random ports on a target host, forcing the system to process each datagram and send ICMP port-unreachable responses, consuming both CPU resources and available bandwidth.

MAC address flooding is a Layer 2 attack that overwhelms a switch's CAM table with forged MAC addresses, forcing the switch to broadcast traffic out all ports - it operates at the data link layer and does not use UDP.