ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ140

VerifiedWeb Application Penetration Testing Methodology

George is a Network Admin at 3D-Networks Ltd. A client emailed him to report that the client’s company website had flaws and that customers were continuously emailing about the inconvenience. While examining the web servers, he identified loopholes in the DNS servers and installed DNSSEC-aware lookups. This made the site functional, and the client was pleased with the result.

What issue does a non-DNSSEC-aware site encounter?

Explanation

DNSSEC uses cryptographic signatures to authenticate DNS records and protect their integrity. Without DNSSEC-aware validation, a malicious party can forge a DNS response, causing a requester to accept incorrect DNS information or be redirected to a spoofed destination.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!