Which are two attack vectors protected by DNS-Layer security? (Choose two.)