303-300 · Question #16
What is the purpose of TSIG in DNS?
The correct answer is B. To sign DNS messages for secure communication. TSIG (Transaction SIGnature) is a DNS security mechanism that uses shared secret keys and HMAC cryptography to authenticate DNS messages between parties - making B correct. It ensures that DNS updates, zone transfers, and queries come from trusted sources, preventing spoofing…
Question
What is the purpose of TSIG in DNS?
Options
- ATo encrypt DNS queries
- BTo sign DNS messages for secure communication
- CTo provide information about DNS servers
- DTo map a domain name to an IP address
How the community answered
(26 responses)- B88% (23)
- C8% (2)
- D4% (1)
Explanation
TSIG (Transaction SIGnature) is a DNS security mechanism that uses shared secret keys and HMAC cryptography to authenticate DNS messages between parties - making B correct. It ensures that DNS updates, zone transfers, and queries come from trusted sources, preventing spoofing and unauthorized modifications.
- A is wrong because TSIG does not encrypt DNS traffic; it only authenticates (signs) it - encryption would require DNS-over-TLS or DNS-over-HTTPS.
- C is wrong because providing DNS server information is the role of NS (Name Server) records, not TSIG.
- D is wrong because mapping domain names to IP addresses is the job of A/AAAA records.
Memory tip: Think of TSIG as a signature on a check - it proves the check came from you (authentication), but it doesn't hide what the check says (no encryption). The "SIG" in TSIG stands for signature, which directly points to answer B.
Topics
Community Discussion
No community discussion yet for this question.