az-800 Practice Question 989
Exam: az-800
Domain: Implement and manage an on-premises and hybrid networking infrastructure
Topic: Implement on-premises and hybrid name resolution
Difficulty: easy
Which DNS security feature, available in Windows Server, provides cryptographic validation of DNS responses to protect clients from DNS spoofing and cache poisoning attacks?
Answer Options
A
DNS Policies
B
DNS Socket Pool
C
DNSSEC
D
DNS Cache Locking
Correct Answer
C: DNSSEC
Explanation
DNSSEC (Domain Name System Security Extensions) adds cryptographic signatures to DNS records, allowing resolving DNS servers to verify the authenticity and integrity of the DNS responses.