DNS Security Extensions Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Configure DNS

What you'll be asked

  1. Which of the following is the primary purpose of DNSSEC?
  2. Which DNS record type is specifically used by DNSSEC to store the public key of a zone?
  3. What is the function of the DS (Delegation Signer) record in a DNSSEC-enabled zone?
  4. If a DNSSEC-validating resolver receives a response for a record that does not exist, how does it verify the 'non-existence' of that record?
  5. When performing a 'Key Rollover' in DNSSEC, why must the ZSK (Zone Signing Key) be updated more frequently than the KSK (Key Signing Key)?

Answers and explanations come after you submit.