Which tool enumerates the DNSSEC zone and obtains results on the DNS record files?

Which tool enumerates the DNSSEC zone and obtains results on the DNS record files?

• A. DNS Cache Snooping
• B. DNSSEC Zone Walking
• C. LDNS
• D. IPsec

Answer: (C)

Enumerating a DNSSEC zone means pulling together all the DNS records that make up that zone, including the DNSSEC-related data, and often saving them in a DNS record file format. LDNS provides a complete DNS toolkit and library that can perform queries and output the results in a parseable form. Using LDNS-based tools (such as drill or dig) you can query a zone and extract its records, including DNSKEY, DS, and RRSIG records, then save or export them as DNS record files. This makes LDNS well suited to actually obtaining the zone contents in a structured, record-ready form. DNS cache snooping looks only at resolver caches and doesn’t yield a full zone; DNSSEC Zone Walking describes the action rather than a specific tool, and IPsec is unrelated to DNS.

Enumerating a DNSSEC zone means pulling together all the DNS records that make up that zone, including the DNSSEC-related data, and often saving them in a DNS record file format. LDNS provides a complete DNS toolkit and library that can perform queries and output the results in a parseable form. Using LDNS-based tools (such as drill or dig) you can query a zone and extract its records, including DNSKEY, DS, and RRSIG records, then save or export them as DNS record files. This makes LDNS well suited to actually obtaining the zone contents in a structured, record-ready form. DNS cache snooping looks only at resolver caches and doesn’t yield a full zone; DNSSEC Zone Walking describes the action rather than a specific tool, and IPsec is unrelated to DNS.