Study. uk . com
  1. Home
  2. All questions
  3. Question 293

CISSP study material · question 293 of 500

A non-validating stub resolver asks a security-aware server for a record whose data is bogus. How is that communicated, and how is verified data signalled? Choose two.

  1. Bogus data is signalled with a dedicated extended error code naming the cause.
  2. Verified data is signalled with the authentic data bit.
  3. Bogus data is signalled only as a server failure response code.
  4. Verified data is signalled by the presence of the signature records themselves.
Show the answer

Answer: C. Bogus data is signalled only as a server failure response code.
B. Verified data is signalled with the authentic data bit.

RFC 4033 defines signalling of bogus data to non-validating stubs by the server failure response code, and signalling of data found secure by the authentic data bit.

Source: RFC 4033 (IETF) — RFC 4033 > 5. Scope of the DNSSEC Document Set

Challenge yourself on this topic → Study as cards