Study. uk . com
  1. Home
  2. All questions
  3. Question 290

CISSP study material · question 290 of 500

A resolver receives an answer for a domain in a part of the namespace covered by no trust anchor it holds. Which DNSSEC state applies, and what is notable about it?

  1. Insecure, which requires a signed proof that no delegation signer record exists.
  2. Bogus, since validation could not be completed.
  3. Indeterminate, which is the default operating mode.
  4. Secure, since no contradiction was found.
Show the answer

Answer: C. Indeterminate, which is the default operating mode.

Indeterminate means there is no trust anchor indicating that part of the tree is secure, and RFC 4033 describes it as the default operation mode.

Source: RFC 4033 (IETF) — RFC 4033 > 5. Scope of the DNSSEC Document Set

Challenge yourself on this topic → Study as cards