Exam MS-203 topic 4 question 89 discussion

Actual exam question from Microsoft's MS-203

Question #: 89
Topic #: 4

HOTSPOT -
You have a Microsoft Exchange Online tenant.
You need to use the DANE protocol to protect against mail server spoofing.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Box 1: DNSSEC -
DANE has direct dependencies on DNSSEC, which works by digitally signing records for DNS lookups using public key cryptography. DNSSEC checks occur on recursive DNS resolvers, the DNS servers that make DNS queries for clients. DNSSEC ensures that DNS records aren't tampered with and are authentic.

Box 2: TLSA -
DANE for SMTP RFC 7672 uses the presence of a Transport Layer Security Authentication (TLSA) record in a domain's DNS record set to signal a domain and its mail server(s) support DANE. If there is no TLSA record present, DNS resolution for mail flow will work as usual without any DANE checks being attempted.
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/how-smtp-dane-works?view=o365-worldwide

by 99redeyeflight at Sept. 18, 2022, 5 p.m.

Comments

Submit Cancel

Amir1909

6 months, 2 weeks ago

Correct

upvoted 1 times

...

Jagomsah

1 year ago

KB >> https://learn.microsoft.com/en-us/microsoft-365/compliance/how-smtp-dane-works?view=o365-worldwide - DANE has direct dependencies on DNSSEC, which works by digitally signing records for DNS lookups using public key cryptography - DANE for SMTP RFC 7672 uses the presence of a Transport Layer Security Authentication (TLSA) record in a domain's DNS record set to signal a domain and its mail server(s) support DANE

upvoted 1 times

...

99redeyeflight

1 year, 9 months ago

correct

upvoted 1 times

...