Certified Cloud Security Professional (CCSP) — Question 91

DNSSEC was designed to add a layer of security to the DNS protocol.
Which type of attack was the DNSSEC extension designed to mitigate?

Answer options

• A. Account hijacking
• B. Snooping
• C. Spoofing
• D. Data exposure

Correct answer: C

Explanation

DNSSEC was specifically developed to prevent spoofing attacks, where an attacker could send false DNS responses to redirect users to malicious sites. The other options, while related to security, do not directly involve the manipulation of DNS responses like spoofing does.