Which of the following attacks allows the bypassing of access control lists on servers or routers, and helps an attacker to hide? Each correct answer represents a complete solution. Choose two.

IP spoofing forges the source IP address in packet headers, allowing an attacker to bypass router or firewall ACLs that permit traffic only from trusted IP ranges, while masking the attacker's real network location.

DNS cache poisoning corrupts resolver caches to redirect traffic to malicious hosts - it does not forge transport-layer addresses used by ACLs and does not hide the attacker's IP or MAC identity.

A DDoS attack overwhelms target resources with volumetric traffic - it does not involve forging identity fields and does not inherently bypass ACLs or conceal a specific attacker.

MAC spoofing involves changing a network interface's MAC address to impersonate a trusted device, bypassing switch-level MAC-based ACLs or port security filters that use MAC addresses as the access control identifier.