312-50V11 · Question #111
Which DNS resource record can indicate how long any "DNS poisoning" could last?
The correct answer is B. SOA. The SOA (Start of Authority) record contains the minimum TTL field, which governs how long DNS records - including poisoned ones - can remain cached by resolvers.
Question
Which DNS resource record can indicate how long any "DNS poisoning" could last?
Options
- AMX
- BSOA
- CNS
- DTIMEOUT
How the community answered
(31 responses)- B94% (29)
- C3% (1)
- D3% (1)
Why each option
The SOA (Start of Authority) record contains the minimum TTL field, which governs how long DNS records - including poisoned ones - can remain cached by resolvers.
The MX record identifies mail exchange servers for a domain and contains no TTL policy data that governs cache duration for poisoning scenarios.
The SOA record includes a minimum TTL value (also used as the negative caching TTL per RFC 2308) that specifies the floor for how long any DNS record in the zone can be cached. A poisoned record injected into a cache will persist until its TTL expires, so the SOA minimum TTL directly indicates the maximum duration of a DNS poisoning event.
The NS record identifies authoritative nameservers for a zone but does not define caching or TTL policy values.
TIMEOUT is not a valid DNS resource record type; it has no existence in the DNS standard record set.
Concept tested: SOA record TTL and DNS cache poisoning duration
Source: https://datatracker.ietf.org/doc/html/rfc2308
Topics
Community Discussion
No community discussion yet for this question.