EC-Council
412-79V10 · Question #53
You have implemented DNSSEC on your primary internal DNS server to protect it from various DNS attacks. Network users complained they are not able to resolve certain domain's IP addresses at certain…
The correct answer is D. DNSSEC does not guarantee the non-existence of a domain name or type. See the full explanation below for the reasoning.
Question
You have implemented DNSSEC on your primary internal DNS server to protect it from various DNS attacks. Network users complained they are not able to resolve certain domain's IP addresses at certain times. What could be the probable reason?
Options
- ADNSSEC does not provide protection against Denial of Service (DoS) attacks
- BDNSSEC does not guarantee availability of a DNS response during an attack
- CDNSSEC does not protect the integrity of a DNS response
- DDNSSEC does not guarantee the non-existence of a domain name or type
How the community answered
(25 responses)- A16% (4)
- B4% (1)
- C8% (2)
- D72% (18)
Community Discussion
No community discussion yet for this question.