What type of security threat is DNSSEC designed to prevent?

The correct answer is C. Spoofing. DNSSEC (Domain Name System Security Extensions) is specifically designed to prevent DNS spoofing, also known as DNS cache poisoning. In a spoofing attack, a malicious actor forges DNS responses to redirect users from a legitimate domain to a fraudulent IP address, enabling…

Submitted by devops_kid· Apr 18, 2026Cloud Platform & Infrastructure Security

Question

Options

AAccount hijacking
BSnooping
CSpoofing
DInjection

How the community answered

(39 responses)

A
5% (2)
C
92% (36)
D
3% (1)

Explanation

DNSSEC (Domain Name System Security Extensions) is specifically designed to prevent DNS spoofing, also known as DNS cache poisoning. In a spoofing attack, a malicious actor forges DNS responses to redirect users from a legitimate domain to a fraudulent IP address, enabling phishing and man-in-the-middle attacks. DNSSEC addresses this by adding cryptographic digital signatures to DNS records, allowing resolvers to verify that the DNS response is authentic and hasn't been tampered with. DNSSEC does not encrypt DNS traffic (so it doesn't prevent snooping/B), and it is unrelated to account hijacking (A) or injection attacks (D).

Topics

#DNSSEC#DNS Security#Spoofing Prevention#Network Security

Community Discussion

No community discussion yet for this question.

Full CCSP Practice