When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?

The correct answer is C. TXT record. DKIM (DomainKeys Identified Mail) works by signing outbound messages with a private key, and publishing the corresponding public key in DNS so receiving servers can verify the signature. The public key is stored in a DNS TXT record (C), formatted as…

Email Authentication and Encryption

Question

Options

AAAAA record
BPTR record
CTXT record
DMX record

How the community answered

(51 responses)

A
2% (1)
B
2% (1)
C
92% (47)
D
4% (2)

Explanation

DKIM (DomainKeys Identified Mail) works by signing outbound messages with a private key, and publishing the corresponding public key in DNS so receiving servers can verify the signature. The public key is stored in a DNS TXT record (C), formatted as: 'selector._domainkey.yourdomain.com' with a TXT value containing the key data (e.g., 'v=DKIM1; k=rsa; p=<public_key>'). AAAA records (A) are for IPv6 addresses, PTR records (B) are for reverse DNS lookups, and MX records (D) identify mail servers - none of these are used for DKIM key publication.

Topics

#DKIM#DNS#Email Authentication#Public Key

Community Discussion

No community discussion yet for this question.

Full 300-720 Practice