Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 356

An organization is using DNS services for their network and want to help improve the security of the DNS infrastructure. Which action accomplishes this task?

Answer options

• A. Use DNSSEC between the endpoints and Cisco Umbrella DNS servers.
• B. Modify the Cisco Umbrella configuration to pass queries only to non-DNSSEC capable zones.
• C. Integrate Cisco Umbrella with Cisco CloudLock to ensure that DNSSEC is functional.
• D. Configure Cisco Umbrella and use DNSSEC for domain authentication to authoritative servers.

Correct answer: D

Explanation

The correct answer is D because configuring Cisco Umbrella with DNSSEC ensures that domain authentication is secure when communicating with authoritative servers. Option A is not fully effective since it only secures the endpoint to Umbrella connection without guaranteeing overall domain authentication. Option B weakens security by avoiding DNSSEC capable zones, while option C does not directly relate to the security of DNS infrastructure.