A company wants to host a publicity available server that performs the following functions:
• Evaluates MX record lookup
• Can perform authenticated requests for A and AAA records
• Uses RRSIG
Which of the following should the company use to fulfill the above requirements?
A. LDAPS
B. DNSSEC
C. SFTP
D. nslookup
E. dig
Website was very helpful. Thaks for posting. The answer is definitely B.
I was under the impression that it was A until I read the article posted. Thanks for helping.
Yea I would think the answer would be B. as well.
The Answer is B (DNSSEC). To facilitate signature validation, DNSSEC adds a few new DNS record types:
RRSIG – Contains a cryptographic signature
DNSKEY – Contains a public signing key
DS – Contains the hash of a DNSKEY record
NSEC and NSEC3 – For explicit denial-of-existence of a DNS record
CDNSKEY and CDS – For a child zone requesting updates to DS record(s) in the parent zone.
https://www.cloudflare.com/dns/dnssec/how-dnssec-works/
I think the correct answer is B.