thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Networking Fundamentals · Intermediate

Domain Name System Security Extensions (DNSSEC)

DNS extensions that digitally sign records so resolvers can verify their authenticity and integrity.

Definition

DNSSEC adds records such as RRSIG, DNSKEY and DS and builds a chain of trust from the root. It protects against cache poisoning and spoofed answers but does not encrypt queries.

Example

A validating resolver rejects a forged answer whose signature does not verify.

Exam tip

DNSSEC = integrity and authenticity, not confidentiality.

Related terms