How many additional DNS queries are needed when DNSSEC integrity checks are added?

The correct answer is B. Zero. DNSSEC adds digital signatures (RRSIG records) and public keys (DNSKEY records) to DNS responses, but these are returned inline as part of the same DNS response - no separate or additional queries are required. The resolver validates the cryptographic signatures using the data al

Submitted by jordan8· Apr 18, 2026Cloud Platform & Infrastructure Security

Question

Options

AThree
BZero
COne
DTwo

How the community answered

(49 responses)

A
6% (3)
B
90% (44)
C
2% (1)
D
2% (1)

Explanation

DNSSEC adds digital signatures (RRSIG records) and public keys (DNSKEY records) to DNS responses, but these are returned inline as part of the same DNS response - no separate or additional queries are required. The resolver validates the cryptographic signatures using the data already returned. This design keeps DNSSEC overhead minimal at the query level, though it does increase the size of DNS responses.

Topics

#DNSSEC#DNS Security#Network Security#Infrastructure Security

Community Discussion

No community discussion yet for this question.

Full CCSP Practice