Which DNS extension cryptographically signs records to prove origin authenticity and integrity?
A CISSP practice question covering Domain 4: Communication and Network Security. Try answering before reading the explanation below.
Show options & answer
Why "DNSSEC" is the right answer
DNSSEC adds RRSIG/DNSKEY records and a chain of trust from the root. DoH/DoT encrypt DNS queries in transit but do not authenticate the records themselves. EDNS extends DNS message size and options.
Study videos for this topic
Want to go deeper on Domain 4? Watch the full breakdown — every video is free, no account, no upsell.
CISSP Domain 4: OSI, IPsec, TLS & VoIP Security
Domain 4 — Communication and Network Security
CISSP Domain 4: Segmentation & Zero Trust Explained
Domain 4 — Communication and Network Security
CISSP Domain 4: Wi-Fi, WPA3, 5G & Cloud Security
Domain 4 — Communication and Network Security
CISSP Domain 4: NAC, Fiber, Firewalls & Endpoint Security
Domain 4 — Communication and Network Security
Take the full CISSP practice test
120 questions, instant explanations, study-video links on every miss. No account.