📖 What is Domain Name System (DNS)?
The Domain Name System (DNS) is the hierarchical and decentralized naming system used to translate human-readable domain names, such as example.com, into machine-readable IP addresses. It acts as the internet's phonebook, allowing users to access websites without remembering complex numerical addresses.
"Watch for questions regarding DNS poisoning or spoofing; these are common attacks targeting this critical infrastructure service to redirect users to malicious sites."
📚 Certification: Certified in Cybersecurity (CC)
🔑 What are the Key Concepts of Domain Name System (DNS)?
- ▸ Hierarchical Structure: DNS uses a top-down approach involving root servers, Top-Level Domain (TLD) servers, and authoritative name servers to resolve requests.
- ▸ Recursive vs. Iterative Queries: Recursive resolvers handle the entire lookup process for the client, while iterative queries require the client to contact multiple servers.
- ▸ Common Resource Records: Key records include A (IPv4), AAAA (IPv6), MX (Mail Exchange for email routing), and CNAME (aliasing one domain name to another).
- ▸ DNS Caching: Local devices and resolvers store recently resolved addresses temporarily to reduce latency and decrease the load on global DNS infrastructure.
- ▸ DNSSEC: Domain Name System Security Extensions add digital signatures to DNS records to ensure authenticity and prevent attackers from spoofing response data.
🎯 How does Domain Name System (DNS) appear on the CC Exam?
You may be asked to identify a DNS cache poisoning attack when a scenario describes users being redirected to a fraudulent website despite typing the correct URL.
A scenario might describe a situation where a user can access a server via its IP address but not its domain name, requiring you to diagnose a DNS failure.
Expect questions about which specific DNS record type must be configured to ensure that emails sent to a domain are routed to the correct mail server.
❓ Frequently Asked Questions
What is the difference between DNS poisoning and DNS spoofing?
While often used interchangeably, poisoning specifically refers to corrupting a DNS resolver's cache with false data, whereas spoofing is the broader act of forging DNS responses to deceive a client.
How does DNSSEC protect against redirection attacks?
DNSSEC uses cryptographic digital signatures to verify that the DNS record received by the client is identical to the record published by the domain owner, preventing unauthorized modifications.
Why is it important to understand the difference between a recursive and authoritative server?
For the exam, remember that the recursive resolver is the 'librarian' searching for the answer, while the authoritative server is the 'book' containing the final, official IP address.