Certified Ethical Hacker (CEH v11) — Question 161

_________ is a set of extensions to DNS that provide the origin authentication of DNS data to DNS clients (resolvers) so as to reduce the threat of DNS poisoning, spoofing, and similar types of attacks.

Answer options

• A. DNSSEC
• B. Resource records
• C. Resource transfer
• D. Zone transfer

Correct answer: A

Explanation

The correct answer is A, DNSSEC, as it specifically addresses the need for origin authentication of DNS data to protect against various attacks. Options B, C, and D do not provide authentication or security features; they refer to types of data or methods associated with DNS but do not mitigate security threats.