Which of the following DNS records are used in DNSSEC?

Question

Options

• AMX
• BTXT
• CRRSIG
• DPTR

• A
  2% (1)
• C
  95% (55)
• D
  3% (2)

Explanation

RRSIG (Resource Record Signature) is a core DNSSEC record type - it contains a cryptographic signature over a DNS resource record set, allowing resolvers to verify that the data hasn't been tampered with. DNSSEC introduces several new record types (RRSIG, DNSKEY, DS, NSEC/NSEC3), and RRSIG is the one directly responsible for signing and authenticating DNS responses.

Why the distractors are wrong:

• MX (Mail Exchanger) routes email to the correct mail server - it predates DNSSEC and has nothing to do with signing or authentication.
• TXT stores arbitrary text data (used for SPF, DKIM, domain verification, etc.) but is not a DNSSEC-specific record - it's just a general-purpose record that DNSSEC can sign, not a DNSSEC mechanism itself.
• PTR performs reverse DNS lookups (IP → hostname) and is unrelated to DNSSEC's authentication chain.

Memory tip: Think of RRSIG as the "receipt signature" - just like signing a document proves it wasn't altered, an RRecord SIGnature proves the DNS data is authentic. If you see "SIG" in a DNS record name on an exam, think DNSSEC.

No community discussion yet for this question.