For an attacker on the internet, which of the following are valid methods to compromise the database server? $($select $2)$ Database server misconfiguration

Malware delivered to PC via phishing

Unpatched SMB vulnerability on the PC

Compromise web server with injection attack