StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Networking · Networking | Implement on-premises and hybrid name resolution

Practice question 193 of 506 · medium

Which two statements about DNSSEC are correct? Select two answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.NSEC/NSEC3 support authenticated nonexistence answers
  2. B.Signing a child automatically updates every parent delegation
  3. C.Secure dynamic updates eliminate the need to validate received answers
  4. D.DNSSEC encrypts all queried names
  5. E.RRSIG carries signatures for record sets
Show the answer and explanation

✓ Correct answers

  • NSEC/NSEC3 support authenticated nonexistence answers
  • RRSIG carries signatures for record sets

RRSIG supplies signatures and NSEC/NSEC3 prove nonexistence. DNSSEC does not encrypt queries. Update authorization does not replace answer validation, and parent delegation/trust publication requires its own process.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.