CCSP: Certified Cloud Security Professional

By ISC · Question Mode

QuestionQ126

VerifiedCloud Platform & Infrastructure Security

DNSSEC was created to add an additional security layer to the DNS protocol.

Which type of attack was the DNSSEC extension intended to mitigate?

Explanation

DNSSEC uses digitally signed DNS records so resolvers can validate that DNS responses are authentic and have not been altered. This mitigates DNS spoofing, including forged responses and cache-poisoning attacks.

Community Discussion

No comments yet. Be the first to start the discussion!