Certified Ethical Hacker (CEH v10) — Question 19

_________ is a set of extensions to DNS that provide the origin authentication of DNS data to DNS clients (resolvers) so as to reduce the threat of DNS poisoning, spoofing, and similar types of attacks.

Answer options

• A. DNSSEC
• B. Resource records
• C. Resource transfer
• D. Zone transfer

Correct answer: A

Explanation

DNSSEC is designed to ensure the integrity and authenticity of DNS data, making it the correct answer. The other options, such as Resource records, Resource transfer, and Zone transfer, do not specifically address the security enhancements provided by DNSSEC against attacks like poisoning and spoofing.