DNS servers are vulnerable to which of the following attacks? (Select THREE correct answers)

DNS cache poisoning involves injecting malicious or incorrect DNS records into a DNS resolver's cache, causing the resolver to return the wrong IP address for legitimate domain names, redirecting users to attacker-controlled sites.

A fork bomb attack targets the operating system or a process by rapidly creating new processes, consuming system resources, and is not a direct attack on the DNS protocol or service itself.

Standard DNS queries do not involve passwords for authentication, so a 'password-based attack' like brute-forcing or dictionary attacks is not a direct vulnerability of the DNS protocol for client queries.

A Man-in-the-Middle (MitM) attack can intercept DNS queries and responses, allowing an attacker to modify the responses to redirect users to malicious servers without their knowledge, often by impersonating the legitimate DNS server.

A Smurf attack is a type of Denial of Service (DoS) attack where an attacker spoofs the source IP address of the victim (the DNS server) and sends a large number of ICMP echo requests to a network's broadcast address, causing all hosts on that network to respond to the victim, flooding it with traffic.