Which protocol encrypts DNS requests by tunneling through TLS via HTTPS?

Study for the CompTIA SecurityX Test. Equip yourself with comprehensive flashcards and multiple choice questions that include hints and explanations. Gear up for your certification exam!

Multiple Choice

Which protocol encrypts DNS requests by tunneling through TLS via HTTPS?

Explanation:
DNS Over HTTPS (DoH) is the protocol that encrypts DNS requests by tunneling them through TLS via HTTPS. Traditionally, DNS queries travel in plaintext, which lets anyone monitoring the network see which domains you look up and can even tamper with responses. DoH wraps those DNS queries inside regular HTTPS traffic, so the queries and answers are encrypted with TLS as they travel to a DoH resolver. This protects the privacy and integrity of DNS lookups and makes the DNS traffic resemble ordinary web traffic to observers, improving security against eavesdropping and certain attacks. The other options don’t relate to encrypting DNS: geolocation is about locating a device, virtual mobile infrastructure focuses on securely delivering apps from servers, and Choose Your Own Device is a device-policy model.

DNS Over HTTPS (DoH) is the protocol that encrypts DNS requests by tunneling them through TLS via HTTPS. Traditionally, DNS queries travel in plaintext, which lets anyone monitoring the network see which domains you look up and can even tamper with responses. DoH wraps those DNS queries inside regular HTTPS traffic, so the queries and answers are encrypted with TLS as they travel to a DoH resolver. This protects the privacy and integrity of DNS lookups and makes the DNS traffic resemble ordinary web traffic to observers, improving security against eavesdropping and certain attacks. The other options don’t relate to encrypting DNS: geolocation is about locating a device, virtual mobile infrastructure focuses on securely delivering apps from servers, and Choose Your Own Device is a device-policy model.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy