StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Networking · Networking | Implement on-premises and hybrid name resolution

Practice question 190 of 506 · easy

A company must detect forged DNS answers but has a separate confidentiality requirement handled elsewhere. Which DNS feature provides answer authenticity and integrity?

Choose the single best answer.

  1. A.A higher TTL on unsigned records
  2. B.A CNAME alias to another unsigned zone
  3. C.DNSSEC
  4. D.Secure dynamic updates as the sole answer-validation mechanism
Show the answer and explanation

✓ Correct answer

  • DNSSEC

DNSSEC signs data for authenticity and integrity validation. Secure dynamic updates authorize record modification rather than validating received answers. TTL and aliasing do not add cryptographic answer validation.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.