Against which of the following does SSH provide protection? Each correct answer represents a complete solution. Choose two.

A broadcast storm is a Layer 2 switching problem caused by looping broadcast frames that overwhelm the network - it is a physical and data-link layer issue that SSH, an application-layer protocol, has no mechanism to address.

SSH provides no protection against denial-of-service attacks because an attacker can still flood an SSH-enabled host with connection requests or traffic volume that exhausts system resources regardless of the encryption in use.

SSH encrypts the entire session including the authentication exchange, so an attacker capturing traffic with a packet sniffer sees only ciphertext and cannot recover plaintext passwords. This directly replaces vulnerable plaintext protocols like Telnet or FTP where credentials are trivially visible on the wire.

SSH authenticates servers using public-key cryptography, requiring the remote host to prove possession of a private key that matches a known public key. An attacker who forges a source IP address cannot produce valid cryptographic proof of identity, defeating IP spoofing.