CompTIA Security+ (SY0-501) — Question 4

A company wants to host a publicly available server that performs the following functions:
✑ Evaluates MX record lookup
✑ Can perform authenticated requests for A and AAA records
✑ Uses RRSIG
Which of the following should the company use to fulfill the above requirements?

Answer options

Correct answer: A

Explanation

DNSSEC is the correct answer because it provides the necessary security extensions for DNS, including RRSIG, which ensures authenticity and integrity of DNS data. The other options, such as SFTP and LDAPS, are unrelated to DNS functionalities, while nslookup and dig are tools for querying DNS but do not provide the security features required in this scenario.