nerdexam
CompTIA

SY0-501 · Question #135

A company wants to host a publicly available server that performs the following functions: Evaluates MX record lookup Can perform authenticated requests for A and AAA records Uses RRSIG Which of the…

The correct answer is A. DNSSEC. DNS Security Extensions (DNSSEC) provides, among other things, cryptographic authenticity of responses using Resource Record Signatures (RRSIG) and authenticated denial of existence using Next-Secure (NSEC) and Hashed-NSEC records (NSEC3).

Submitted by joshua94· Mar 4, 2026Security architecture

Question

A company wants to host a publicly available server that performs the following functions:

Evaluates MX record lookup Can perform authenticated requests for A and AAA records Uses RRSIG Which of the following should the company use to fulfill the above requirements?

Options

  • ADNSSEC
  • BSFTP
  • Cnslookup
  • Ddig

How the community answered

(24 responses)
  • A
    75% (18)
  • B
    4% (1)
  • C
    8% (2)
  • D
    13% (3)

Explanation

DNS Security Extensions (DNSSEC) provides, among other things, cryptographic authenticity of responses using Resource Record Signatures (RRSIG) and authenticated denial of existence using Next-Secure (NSEC) and Hashed-NSEC records (NSEC3).

Topics

#DNSSEC#MX records#RRSIG#DNS security

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice