nerdexam
CompTIA

SY0-301 · Question #461

When reviewing security logs, an administrator sees requests for the AAAA record of

The correct answer is D. IPv6 DNS record. The AAAA DNS record type maps a hostname to an IPv6 address, and seeing requests for it indicates a client is resolving IPv6 connectivity.

Security architecture

Question

When reviewing security logs, an administrator sees requests for the AAAA record of

Options

  • ADNSSEC record
  • BIPv4 DNS record
  • CIPSEC DNS record
  • DIPv6 DNS record

How the community answered

(29 responses)
  • A
    7% (2)
  • B
    3% (1)
  • D
    90% (26)

Why each option

The AAAA DNS record type maps a hostname to an IPv6 address, and seeing requests for it indicates a client is resolving IPv6 connectivity.

ADNSSEC record

DNSSEC records are used to digitally sign DNS data to prevent spoofing and cache poisoning, not to store IPv6 address mappings.

BIPv4 DNS record

IPv4 DNS records use the 'A' record type, not 'AAAA'; the A record stores 32-bit IPv4 addresses.

CIPSEC DNS record

There is no standard 'IPSEC DNS record' type; IPsec is a network-layer security protocol suite unrelated to DNS address record types.

DIPv6 DNS recordCorrect

The AAAA record is the DNS resource record type specifically designed to store 128-bit IPv6 addresses. When a client queries for the AAAA record of a hostname, it is requesting the IPv6 address associated with that name, which is how modern dual-stack systems resolve IPv6 connectivity.

Concept tested: DNS AAAA record type for IPv6 resolution

Source: https://www.rfc-editor.org/rfc/rfc3596

Topics

#DNS#AAAA record#IPv6#name resolution

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice