GIAC

GCIH · Question #570

What element of the DNSSec standard would help stop DNS cache poisoning attacks?

The correct answer is C. Digitally signed DNS records. Digitally signed DNS records are included in the DNSSec standard.

Reconnaissance, Scanning, and Enumeration

Question

What element of the DNSSec standard would help stop DNS cache poisoning attacks?

Options

ASupport for IPSec
BHardened DNS servers
CDigitally signed DNS records
DDifficult-to-predict Query ID numbers

How the community answered

(32 responses)

A
3% (1)
B
3% (1)
C
94% (30)

Explanation

Digitally signed DNS records are included in the DNSSec standard.

Topics

#DNSSec#DNS cache poisoning#digital signatures#DNS security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full GCIH Practice