Which of the following is used to perform DNSSEC validation on behalf of clients?

The correct answer is A. Recursive name server. A recursive name server (also called a recursive resolver) performs DNSSEC validation on behalf of clients because it is the component that actually chases down the full DNS resolution chain, verifying cryptographic signatures at each step before returning a trusted answer to…

Network Security

Question

Options

ARecursive name server
BAuthoritative name server
CSecondary name server
DPrimary name server

How the community answered

(44 responses)

A
73% (32)
B
7% (3)
C
2% (1)
D
18% (8)

Explanation

A recursive name server (also called a recursive resolver) performs DNSSEC validation on behalf of clients because it is the component that actually chases down the full DNS resolution chain, verifying cryptographic signatures at each step before returning a trusted answer to the client. Authoritative name servers (B) sign DNS records with DNSSEC keys and serve them, but they don't validate on behalf of clients - that's a producer role, not a validator role. Secondary (C) and Primary (D) name servers are both types of authoritative servers distinguished by whether they hold the master zone data or receive it via zone transfer - neither role involves validating queries for clients.

Memory tip: Think "recursive = resolver = validates for you." The recursive server does the legwork (recursing through the DNS tree) and the trust-checking, so your client doesn't have to.

Topics

#DNSSEC validation#recursive resolver#DNS architecture#authentication

Community Discussion

No community discussion yet for this question.

Full 303-300 Practice