Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 22 of 77
Free Preview · 77 of 256 · questions 1–77 of 256 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
To completely disable DNSSEC, removing DS records from your Cloud DNS-managed zone is the right step. However, DNSSEC validation is also controlled at your domain registrar. If DNSSEC is still enabled at the registrar, DNS resolvers may continue to expect DNSSEC validation, causing resolution issues. Thus, you need to disable DNSSEC at your domain registrar to fully stop DNSSEC validation. So, the correct action is C. Disable DNSSEC at your domain registrar.
Choose C. Explanation: DS Records Removal: Removing DS records from your zone is the correct step to disable DNSSEC for a Cloud DNS-managed zone. This action signals that DNSSEC should no longer be enforced for the domain. Propagation Time: DNS changes can take some time to propagate throughout the DNS infrastructure, and cached DS records may still be causing validation issues for some validating resolvers. Registrar Configuration: Disabling DNSSEC at your domain registrar is a crucial step. The registrar is the authoritative source for your domain's DNSSEC status, and disabling DNSSEC there ensures that authoritative DNS servers no longer include DNSSEC-related information for your domain.
C: Disable DNSSEC for managed zones Important: Before disabling DNSSEC for a managed zone that you want to use, you must deactivate DNSSEC at your domain *** registrar to ensure that DNSSEC-validating resolvers can still resolve names in the zone.