An organization is using DNS services for their network and want to help improve the security of the DNS infrastructure. Which action accomplishes this task?

DNSSEC is designed to authenticate responses from authoritative DNS servers to recursive resolvers, not typically between endpoints and recursive resolvers like Cisco Umbrella DNS servers.

Passing queries only to non-DNSSEC capable zones would degrade security by intentionally avoiding the integrity checks that DNSSEC provides.

Cisco CloudLock is a Cloud Access Security Broker (CASB) focused on cloud application security and data protection, and its integration with Umbrella does not directly ensure the functionality or implementation of DNSSEC.

DNSSEC (Domain Name System Security Extensions) provides cryptographic authentication of DNS data, ensuring that responses received from authoritative DNS servers are legitimate and untampered. When configured with Cisco Umbrella, DNSSEC enhances the integrity and authenticity of domain name resolution, protecting against DNS spoofing and cache poisoning attacks.