Which command, included in BIND, generates DNSSEC keys? (Specify ONLY the command without any path or parameters.) Solution: dnssec-keygen Determine whether the given solution is correct?

The correct answer is A. Correct. Option A is correct because dnssec-keygen is the standard BIND utility specifically designed to generate DNSSEC (DNS Security Extensions) cryptographic key pairs - it creates both the public key file (.key) and the private key file (.private) used to sign DNS zones. There are…

Cryptography

Question

Options

ACorrect
BIncorrect

How the community answered

(16 responses)

A
88% (14)
B
13% (2)

Explanation

Option A is correct because dnssec-keygen is the standard BIND utility specifically designed to generate DNSSEC (DNS Security Extensions) cryptographic key pairs - it creates both the public key file (.key) and the private key file (.private) used to sign DNS zones. There are no distractors to address here since this is a true/false-style question with only one solution presented, and the solution matches the actual command. To remember this, think of the name as a compound of its purpose: DNSSEC (the security protocol) + keygen (key generation) - it does exactly what its name says, making it one of the more intuitive command names in the BIND toolset.

Topics

#DNSSEC#BIND#Key Generation#Cryptography

Community Discussion

No community discussion yet for this question.

Full 303-300 Practice