LPIC-2 DNS, Web and Mail Services Practice Question
A DNS administrator wants to implement DNSSEC on an authoritative zone. Which TWO resource records are essential for DNSSEC?
⚠ Common exam trap
A common mix-up: candidates confuse NSEC as essential because it is commonly associated with DNSSEC, but the question asks for records essential for DNSSEC itself, not for denial of existence.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
DNSKEY
DNSKEY and RRSIG are the two essential resource records for DNSSEC. The DNSKEY record holds the public signing key, while the RRSIG record contains the digital signature for each RRset, allowing resolvers to verify authenticity and integrity of the zone data.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
NSEC
Why it's wrong here
NSEC records are used for authenticated denial of existence but are not strictly essential for basic DNSSEC; DNSKEY and RRSIG are core.
- ✓
DNSKEY
Why this is correct
DNSKEY records hold the public key used to verify signatures.
- ✓
RRSIG
Why this is correct
RRSIG records contain the digital signatures for each RRset, verifying authenticity.
- ✗
A
Why it's wrong here
A record is a regular resource record, not essential for DNSSEC.
- ✗
SOA
Why it's wrong here
SOA record is not specific to DNSSEC; it exists in all zones.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every LPIC-2 question from scratch — 507 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This LPIC-2 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-2 exam.