DNS servers are vulnerable to which of the following attacks? (Select THREE correct answers)

DNS Cache Poisoning involves injecting forged or malicious data into a DNS resolver's cache, causing it to return incorrect IP addresses for domain names, redirecting users to fraudulent sites.

A Fork Bomb attack aims to consume system resources by rapidly creating new processes, which is a general OS-level denial-of-service, not a vulnerability specific to the DNS protocol.

Standard DNS queries and zone transfers do not involve password-based authentication for the general public, making 'password-based attack' not a common or direct vulnerability type against DNS servers.

A Man-in-the-Middle (MITM) attack on DNS involves an attacker intercepting and manipulating DNS queries and responses between a client and a DNS server, potentially providing false resolution information.

A Smurf attack typically refers to an ICMP-based DDoS, but the principle of using a network service for reflection/amplification applies to DNS, where open DNS resolvers can be abused for large-scale DNS amplification attacks.