An organization is evaluating their email authentication mechanisms to bolster security. They wish to ensure that emails are not only transmitted securely but also retain proof of sender identity and message integrity upon delivery. They are looking to implement a method that provides a cryptographic signature for emails, which can be validated using a public key in the DNS. The method should confirm that the message was not tampered with in transit. To accomplish this, which DNS record type should they configure to contain the public key for this cryptographic verification?
To support DKIM, a domain must have a specific DNS TXT record that holds the public key used by recipients to verify the cryptographic signature in the emails sent from that domain. The correct setting is a DNS TXT record that is configured with a specific tag that indicates it contains a DKIM public key. The use of a CNAME record for DKIM is incorrect because it is typically used for domain aliasing, not for storing cryptographic information. An MX record is used for directing email to mail servers and does not hold cryptographic keys. An AAAA record is used to map a domain name to an IPv6 address and is irrelevant to DKIM.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is DKIM and how does it enhance email security?
Open an interactive chat with Bash
Why is a DNS TXT record used to store DKIM public keys?
Open an interactive chat with Bash
How is DKIM different from SPF and DMARC?
Open an interactive chat with Bash
CompTIA A+ 220-1101 (V14)
Networking
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .