ANS-C01 · Question #205
ANS-C01 Question #205: Real Exam Question with Answer & Explanation
Sign in or unlock ANS-C01 to reveal the answer and full explanation for question #205. The question stem and answer options stay visible for context.
Question
A company uses Amazon Route 53 for its DNS needs. The company's security team wants to update the DNS infrastructure to provide the most recent security posture. The security team has configured DNS Security Extensions (DNSSEC) for the domain. The security team wants a network engineer to explain who is responsible for the rotation of DNSSEC keys. Which explanation should the network administrator provide to the security team?
Options
- AAWS rotates the zone-signing key (ZSK). The company rotates the key-signing key (KSK).
- BThe company rotates the zone-signing key (ZSK) and the key-signing key (KSK).
- CAWS rotates the AWS Key Management Service (AWS KMS) key and the key-signing key (KSK).
- DThe company rotates the AWS Key Management Service (AWS KMS) key. AWS rotates the key-
Unlock ANS-C01 to see the answer
You've previewed enough free ANS-C01 questions. Unlock ANS-C01 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.