Exam CAS-004 topic 1 question 524 discussion

o DNSSEC (Domain Name System Security Extensions): This helps protect against on-path attacks by ensuring the authenticity and integrity of DNS responses through digital signatures o Public keys: These are used in conjunction with DNSSEC to authenticate and verify the integrity of DNS data, and they can also be used to secure zone transfers through mechanisms like TSIG (Transaction Signature)

D. DNSSEC mitigates threats such as DNS spoofing and cache poisoning by providing data integrity and origin authentication. This ensures that attackers cannot easily intercept or alter DNS responses, thereby protecting against on-path (man-in-the-middle) attacks. A. Public keys are integral to various authentication and encryption mechanisms. In the context of DNS, public keys are used in DNSSEC to verify digital signatures.

A. Public keys D. DNSSEC DNSSEC (Domain Name System Security Extensions) provides protection against on-path attacks by ensuring the authenticity of DNS data, while public keys can be used for mutual authentication in zone transfers.