AWS Certified Advanced Networking - Specialty
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
A company utilizes Amazon Route 53 for DNS services. The security team has implemented DNS Security Extensions (DNSSEC) to enhance the domain's security posture and now seeks clarification on the responsibility for rotating DNSSEC keys.
What should the network engineer communicate to the security team regarding the party responsible for DNSSEC key rotation?
A
AWS rotates the zone-signing key (ZSK). The company rotates the key-signing key (KSK).
B
The company rotates the zone-signing key (ZSK) and the key-signing key (KSK).
C
AWS rotates the AWS Key Management Service (AWS KMS) key and the key-signing key (KSK).
D
The company rotates the AWS Key Management Service (AWS KMS) key. AWS rotates the key-signing key (KSK).