Intermediate
Cybersecurity & Cryptography
Q80 / 100
What is the purpose of DNSSEC (Domain Name System Security Extensions)?
Correct! Well done.
Incorrect.
The correct answer is B) Cryptographically signing DNS records so resolvers can verify that responses genuinely originate from the authoritative source and have not been tampered with in transit
B
Correct Answer
Cryptographically signing DNS records so resolvers can verify that responses genuinely originate from the authoritative source and have not been tampered with in transit
Explanation
DNSSEC adds a chain of digital signatures (RRSIG records validated against DNSKEY/DS records up to the root) so resolvers can detect forged or altered responses, directly countering DNS cache-poisoning and spoofing attacks. Note it provides integrity and authenticity, not confidentiality — that is the role of DNS-over-HTTPS/TLS.
Progress
80/100