Exam SY0-501 topic 1 question 237 discussion

Actual exam question from CompTIA's SY0-501

Question #: 237
Topic #: 1

A company wants to host a publicly available server that performs the following functions:
✑ Evaluates MX record lookup
✑ Can perform authenticated requests for A and AAA records
✑ Uses RRSIG
Which of the following should the company use to fulfill the above requirements?

A. DNSSEC
B. SFTP
C. nslookup
D. dig
E. LDAPS

Show Suggested Answer

Suggested Answer: A 🗳️
DNS Security Extensions (DNSSEC) provides, among other things, cryptographic authenticity of responses using Resource Record Signatures (RRSIG) and authenticated denial of existence using Next-Secure (NSEC) and Hashed-NSEC records (NSEC3).

by andev08 at March 31, 2019, 6:56 p.m.

Comments

Submit Cancel

andev08

Highly Voted 6 years, 2 months ago

it should be DNSSEC.

upvoted 10 times

...

slackbot

Most Recent 5 months ago

Selected Answer: D

it seems like they just need a service performing DNS lookups like Dig. i dont see the correlation between DNSSEC and MX records lookup

upvoted 1 times

...

CTK246

4 years, 1 month ago

A or AAA = DNS

upvoted 2 times

...

vaxakaw829

4 years, 11 months ago

https://www.cloudflare.com/dns/dnssec/how-dnssec-works/

upvoted 1 times

...

Bidar12

5 years, 3 months ago

The Domain Name System Security Extensions (DNSSEC) is a suite of Internet Engineering Task Force (IETF) specifications for securing certain kinds of information provided by the Domain Name System (DNS) as used on Internet Protocol (IP) networks.

upvoted 4 times

...