What are the two keys that must be generated if you want to secure a zone with a digital signature? What is the purpose of each?
What will be an ideal response?
A key-signing key and a Zone-signing key must be generated. A key-signing key (KSK) has a private and public key associated with it. The private key is used to sign all DNSKEY records, and the public key is used as a trust anchor for validating DNS responses. A zone-signing key (ZSK) is a public and private key combination stored in a certificate used to sign the zone. The KSK is used to sign the ZSK to validate it.
You might also like to view...
Which of the following statements would probably NOT be included in a network administrator's ethical code?
A) stay up to date with technical information B) strive to maintain reliability and availability of the system C) an effort to keep current on laws and policies D) personal feelings and beliefs that influence how others are treated
Design the Add Customer Web page for Sludge’s auto. Include a profile that would allow Sludge’s to send the customer an email if a certain part becomes available.
What will be an ideal response?