CCSP · Question #635
DNSSEC was designed to add a layer of security to the DNS protocol. Which type of attack was the DNSSEC extension designed to mitigate?
The correct answer is C. Spoofing. DNS spoofing (also called DNS cache poisoning) involves injecting fraudulent DNS records into a resolver's cache so that users are directed to malicious IP addresses instead of the legitimate ones. DNSSEC (DNS Security Extensions) mitigates this by adding cryptographic signatures
Question
DNSSEC was designed to add a layer of security to the DNS protocol. Which type of attack was the DNSSEC extension designed to mitigate?
Options
- AAccount hijacking
- BSnooping
- CSpoofing
- DData exposure
How the community answered
(31 responses)- A3% (1)
- B3% (1)
- C87% (27)
- D6% (2)
Explanation
DNS spoofing (also called DNS cache poisoning) involves injecting fraudulent DNS records into a resolver's cache so that users are directed to malicious IP addresses instead of the legitimate ones. DNSSEC (DNS Security Extensions) mitigates this by adding cryptographic signatures to DNS records, allowing resolvers to verify that responses are authentic and have not been tampered with. DNSSEC does not encrypt DNS traffic (so it does not prevent snooping), and it has no role in account hijacking or data exposure in the traditional sense.
Topics
Community Discussion
No community discussion yet for this question.