Examkin

Soru

Zorluk: ZorInformation Technology and Cybersecurity

State whether the following statement regarding Internet infrastructure security is True or False: Domain Name System Security Extensions (DNSSEC) mitigate DNS spoofing and cache poisoning by encrypting DNS query payloads to ensure data confidentiality during transmission between client resolvers and authoritative servers.

Cevap: Cevap

Cevap

False. DNSSEC provides origin authentication and data integrity using digital signatures, but it does not encrypt DNS transactions or guarantee payload confidentiality.
The statement is false because DNSSEC introduces cryptographic signatures to validate the authenticity and integrity of DNS resource records to prevent cache poisoning, but it does not encrypt DNS traffic. Privacy and confidentiality require transport-layer encryption protocols like DNS over HTTPS (DoH) or DNS over TLS (DoT).

Adım Adım Çözüm

1
Analyze the functional objectives of Domain Name System Security Extensions (DNSSEC).
DNSSEC attaches public-key digital signatures (such as RRSIG records) to DNS data to verify that the response originates from the correct server and has not been altered.
Defining the primary security goal of DNSSEC is essential to evaluate the statement.
2
Distinguish between data integrity/authentication and data confidentiality in network security.
DNSSEC responses are cryptographically signed but transmitted in plain text, meaning DNS queries remain visible to intermediate network observers.
Authenticating the source of data (integrity) does not conceal the contents of the data (confidentiality).
3
Identify the protocols that explicitly address DNS confidentiality.
Protocols like DNS over TLS (DoT) and DNS over HTTPS (DoH) encrypt DNS queries for confidentiality, whereas DNSSEC focuses exclusively on authenticity and tamper resistance.
This confirms that attributing payload encryption and data confidentiality to DNSSEC is technically false.

Anahtar Kavram

DNSSEC security guarantees (Origin Authentication and Integrity vs Payload Confidentiality)
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Information Technology and Cybersecurity

Bu konudan daha fazla soru