ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ63

VerifiedNetwork Penetration Testing Methodology – Internal

You implemented DNSSEC on your primary internal DNS server to protect it from various DNS attacks. Network users reported that, at certain times, they cannot resolve domain names to IP addresses.

What is the most probable reason?

Explanation

DNSSEC cryptographically provides DNS data-origin authentication, integrity assurance, and authenticated denial of DNS data existence, but it does not provide availability protection. A denial-of-service attack can still overwhelm or make a DNS server unreachable, preventing domain-name resolution.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!