Which three options are types of Layer 2 network attack? (Choose three.)

ARP attacks such as ARP poisoning or ARP spoofing manipulate Layer 2 address resolution to redirect traffic, making them classic Layer 2 threats mitigated by Dynamic ARP Inspection.

Brute force attacks target authentication credentials at the application or transport layer and are not specific to Layer 2 protocols or switching infrastructure.

Spoofing attacks at Layer 2 - primarily MAC address spoofing - allow an attacker to impersonate another device on the local network segment, bypassing port security.

DDoS attacks overwhelm resources using volumetric or protocol methods that operate primarily at Layers 3 and 4, not at the Layer 2 data link layer.

VLAN hopping exploits 802.1Q trunk negotiation or double-tagging to send frames to VLANs the attacker should not have access to, entirely within Layer 2 switching infrastructure.

Botnet attacks use compromised hosts to conduct various attacks but are not a Layer 2 attack category - they operate across multiple layers and are not tied to switching protocols.