Which of the following attacks does Unicast Reverse Path Forwarding prevent?

Man-in-the-middle attacks involve traffic interception between two parties, which uRPF does not address because it only validates source IP addresses on ingress interfaces.

ARP poisoning is a Layer 2 attack targeting MAC-to-IP mappings; uRPF operates at Layer 3 and has no visibility into ARP table manipulation.

Broadcast storms result from switching loops and are mitigated by Spanning Tree Protocol, not by uRPF which operates on unicast IP routing.

uRPF checks the routing table to verify that the source IP of an incoming packet would be routed back out the same interface it arrived on. If the source address does not match, the packet is dropped, directly preventing IP spoofing attacks where an attacker forges the source IP to bypass filters or impersonate trusted hosts.