Which two network attack statements are true？（）

Access attacks can consist of password attacks，trust exploitation，port redirection，and man-in-the-middle attacks.
B. Access attacks can consist of UDP and TCP SYN flooding，ICMP echo-request floods，and ICMP directed broadcasts.
C. DoS attacks can be reduced through the use of access control configuration，encryption，and RFC 2827 filtering.
DoS attacks can consist of IP spoofing and DDoS attacks.
E. IP spoofing can be reduced through the use of policy-based routing.
F. IP spoofing exploits known vulnerabilities in authentication services， FTP services，and web services to gain entry to web accounts，confidential databases，and other sensitive information.