A system administrator needs to meet the maximum amount of security goals for a new DNS infrastructure. The administrator deploys DNSSEC extensions to the domain names and infrastructure. Which of…

The correct answer is B. Authentication C. Integrity. DNSSEC (DNS Security Extensions) uses digital signatures to protect DNS data. It provides Authentication (B) by verifying that DNS responses originate from an authoritative and legitimate source, preventing DNS spoofing and cache poisoning. It provides Integrity (C) by ensuring…

Technical Integration of Enterprise Components

Question

A system administrator needs to meet the maximum amount of security goals for a new DNS infrastructure. The administrator deploys DNSSEC extensions to the domain names and infrastructure. Which of the following security goals does this meet? (Select TWO).

Options

AAvailability
BAuthentication
CIntegrity
DConfidentiality
EEncryption

How the community answered

(68 responses)

A
3% (2)
B
91% (62)
D
4% (3)
E
1% (1)

Explanation

DNSSEC (DNS Security Extensions) uses digital signatures to protect DNS data. It provides Authentication (B) by verifying that DNS responses originate from an authoritative and legitimate source, preventing DNS spoofing and cache poisoning. It provides Integrity (C) by ensuring DNS records have not been altered in transit - any tampered response will fail signature validation. DNSSEC does NOT provide Confidentiality or Encryption (D, E) because DNS data is still transmitted in plaintext; it only signs the data, it does not encrypt it. Availability (A) is not addressed by DNSSEC signatures.

Topics

#DNSSEC#DNS security#data integrity#authentication

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice