312-50V13 · Question #96
Which DNS resource record can indicate how long any "DNS poisoning" could last?
The correct answer is B. SOA. The Start of Authority (SOA) record in DNS contains the Time to Live (TTL) value, which dictates how long a DNS record can be cached by resolving servers, thus impacting the duration of potential DNS poisoning.
Question
Options
- AMX
- BSOA
- CNS
- DTIMEOUT
How the community answered
(68 responses)- A1% (1)
- B94% (64)
- C3% (2)
- D1% (1)
Why each option
The Start of Authority (SOA) record in DNS contains the Time to Live (TTL) value, which dictates how long a DNS record can be cached by resolving servers, thus impacting the duration of potential DNS poisoning.
MX (Mail Exchanger) records specify the mail servers responsible for accepting email messages on behalf of a domain, and do not contain TTL information for the entire zone.
The SOA (Start of Authority) record specifies several parameters for a DNS zone, including the minimum Time to Live (TTL) value. This TTL value determines how long caching DNS servers should store any DNS record from that zone, meaning a lower TTL value would cause cached poisoned entries to expire sooner.
NS (Name Server) records indicate the authoritative name servers for a domain, but they do not define the TTL for other records in the zone.
TIMEOUT is a generic networking term for a period of inactivity before an operation fails, not a specific DNS resource record type.
Concept tested: DNS SOA record and TTL
Source: https://learn.microsoft.com/en-us/windows-server/networking/dns/zone/dns-zone-records
Topics
Community Discussion
No community discussion yet for this question.