nerdexam
EC-Council

312-50V11 · Question #111

Which DNS resource record can indicate how long any "DNS poisoning" could last?

The correct answer is B. SOA. The SOA (Start of Authority) record contains the minimum TTL field, which governs how long DNS records - including poisoned ones - can remain cached by resolvers.

Enumeration

Question

Which DNS resource record can indicate how long any "DNS poisoning" could last?

Options

  • AMX
  • BSOA
  • CNS
  • DTIMEOUT

How the community answered

(31 responses)
  • B
    94% (29)
  • C
    3% (1)
  • D
    3% (1)

Why each option

The SOA (Start of Authority) record contains the minimum TTL field, which governs how long DNS records - including poisoned ones - can remain cached by resolvers.

AMX

The MX record identifies mail exchange servers for a domain and contains no TTL policy data that governs cache duration for poisoning scenarios.

BSOACorrect

The SOA record includes a minimum TTL value (also used as the negative caching TTL per RFC 2308) that specifies the floor for how long any DNS record in the zone can be cached. A poisoned record injected into a cache will persist until its TTL expires, so the SOA minimum TTL directly indicates the maximum duration of a DNS poisoning event.

CNS

The NS record identifies authoritative nameservers for a zone but does not define caching or TTL policy values.

DTIMEOUT

TIMEOUT is not a valid DNS resource record type; it has no existence in the DNS standard record set.

Concept tested: SOA record TTL and DNS cache poisoning duration

Source: https://datatracker.ietf.org/doc/html/rfc2308

Topics

#DNS poisoning#TTL#SOA record#cache poisoning

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice