# 312-50v10 — Question 425

**Type:** multiple_choice
**Topics:** topic_1

## Question

_________ is a set of extensions to DNS that provide the origin authentication of DNS data to DNS clients (resolvers) so as to reduce the threat of DNS poisoning, spoofing, and similar types of attacks.

## Correct Answer

_See scenario._

## Explanation

DNSSEC strengthens authentication in DNS using digital signatures based on public key cryptography. With DNSSEC, it's not DNS queries and responses themselves that are cryptographically signed, but rather DNS data itself is signed by the owner of the data.

DNSSEC adds two important features to the DNS protocol:

Data origin authentication allows a resolver to cryptographically verify that the data it received actually came from the zone where it believes the data originated.
Data integrity protection allows the resolver to know that the data hasn't been modified in transit since it was originally signed by the zone owner with the zone's private key.

Resource sited : https://www.icann.org/resources/pages/dnssec-what-is-it-why-important-2019-03-05-en

**Reference:** examtopics_top_comment

---
Source: https://hiexam.net/q/eccouncil/312-50v10/425  
Practice (tracked): https://hiexam.net/study/312-50v10/practice