A company wants to host a publicly available server that performs the following functions: -> Evaluates MX record lookup -> Can perform authenticated requests for A and AAA records -> Uses RRSIG Which of the following should the company use to fulfill the above requirements?
Click on the arrows to vote for the correct answer
A. B. C. D. E.A.
DNS Security Extensions (DNSSEC) provides, among other things, cryptographic authenticity of responses using Resource Record Signatures (RRSIG) and authenticated denial of existence using Next-Secure (NSEC) and Hashed-NSEC records (NSEC3).
The company's requirements involve the use of DNS, which is a system that maps domain names to IP addresses. The requirements specifically mention MX records, which are used to determine the mail servers responsible for a particular domain. The requirements also mention authenticated requests for A and AAA records, which are used to map a domain name to an IP address.
The use of RRSIG indicates that the company is interested in DNSSEC, which is a security extension to DNS that provides authentication and integrity to DNS records. This is important because DNS records can be manipulated by attackers to redirect users to malicious sites.
Based on these requirements, the company should use DNSSEC to fulfill the requirements. DNSSEC is designed to provide the necessary security features required by the company's needs, including authenticated requests and RRSIG. This ensures that the company's DNS records are protected from manipulation by attackers.
The other options presented in the answer choices are not relevant to the company's requirements. SFTP is a secure file transfer protocol, nslookup is a command-line tool used to query DNS records, dig is a command-line tool used to perform DNS lookups, and LDAPS is a secure version of LDAP used for directory services. While these may be useful in other contexts, they do not provide the necessary functionality to fulfill the requirements described by the company.