CompTIA
CAS-005 · Question #419
A DNS forward lookup zone named comptia.org must: - Ensure the DNS is protected from on-path attacks. - Ensure zone transfers use mutual authentication and are authenticated and negotiated. Which of t
Sign in or unlock CAS-005 to reveal the answer and full explanation for question #419. The question stem and answer options stay visible for context.
Submitted by joshua94· Mar 6, 2026Security Engineering
Question
A DNS forward lookup zone named comptia.org must:
- Ensure the DNS is protected from on-path attacks.
- Ensure zone transfers use mutual authentication and are authenticated
and negotiated. Which of the following should the security architect configure to meet these requirements? (Choose two).
Options
- APublic keys
- BConditional forwarders
- CRoot hints
- DDNSSEC
- ECNAME records
- FSRV records
Unlock CAS-005 to see the answer
You've previewed enough free CAS-005 questions. Unlock CAS-005 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.