A network administrator is concerned with on-path attacks and wants to provide encryption of fully qualified domain names in outbound communications. Which of the following best describes the…

SSL (Secure Sockets Layer) is an older, deprecated protocol for securing web traffic; TLS has replaced it and neither specifically encrypts DNS queries in the way DoH does.

DNS over HTTPS (DoH) encrypts DNS queries and responses within an HTTPS tunnel, thus hiding the FQDNs requested from on-path attackers and preventing DNS tampering or eavesdropping.

TLS (Transport Layer Security) is a cryptographic protocol that provides secure communication over a network, and while DoH uses TLS, TLS itself isn't the specific protocol for encrypting DNS FQDNs in transit; it's the underlying mechanism.

DNSSEC (DNS Security Extensions) provides authentication and integrity for DNS data, preventing spoofing and cache poisoning, but it does not encrypt DNS queries themselves to hide FQDNs from an observer.