312-50V9 · Question #268
_________ is a set of extensions to DNS that provide to DNS clients (resolvers) origin authentication of DNS data to reduce the threat of DNS poisoning, spoofing, and similar attacks types.
The correct answer is A. DNSSEC. DNSSEC (Domain Name System Security Extensions) adds cryptographic signatures to DNS records, allowing resolvers to verify that DNS responses are authentic and have not been tampered with. It protects against DNS cache poisoning (e.g., Kaminsky attack), spoofing, and…
Question
_________ is a set of extensions to DNS that provide to DNS clients (resolvers) origin authentication of DNS data to reduce the threat of DNS poisoning, spoofing, and similar attacks types.
Options
- ADNSSEC
- BZone transfer
- CResource transfer
- DResource records
How the community answered
(24 responses)- A92% (22)
- B4% (1)
- C4% (1)
Explanation
DNSSEC (Domain Name System Security Extensions) adds cryptographic signatures to DNS records, allowing resolvers to verify that DNS responses are authentic and have not been tampered with. It protects against DNS cache poisoning (e.g., Kaminsky attack), spoofing, and man-in-the-middle attacks by providing data origin authentication and integrity verification. Zone transfer (B) is a DNS replication mechanism. Resource records (D) are standard DNS data entries (A, MX, CNAME, etc.). Resource transfer (C) is not a real DNS term. Only DNSSEC directly addresses origin authentication as described.
Topics
Community Discussion
No community discussion yet for this question.