AWS Certified Advanced Networking - Specialty ANS-C01 — Topic 1 Question 282

Question

A security company has a domain that stores DNS records in an Amazon Route 53 public hosted zone. The company has configured DNS Security Extensions (DNSSEC) signing for the domain. The domain has no subdomains. A network engineer must disable DNSSEC signing for the domain. The network engineer must not cause any DNS outage. Which solution will meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Delete the designated signer (DS) record in the parent domain. Wait for the TTL of the DS record to elapse. Disable DNSSEC signing. Deactivate the key-signing keys (KSKs).

AWS Certified Advanced Networking - Specialty ANS-C01 — Question 282