Which of the following indicates EDNS0 support in a DNS message?

Prepare for the Wireshark Traffic Analysis Exam. Study with flashcards and multiple choice questions, each question includes hints and explanations. Ace your exam!

Multiple Choice

Which of the following indicates EDNS0 support in a DNS message?

Explanation:
EDNS0 support is signaled by the presence of an OPT pseudo-record in the DNS message. This OPT record is a special extension (type 41) that lives in the Additional section and carries EDNS0-related parameters, such as the UDP payload size the responder can handle, the EDNS version, and flags (including the DNSSEC OK bit). Seeing this OPT pseudo-record shows that the message is using EDNS0 to extend DNS capabilities, like allowing larger UDP messages and additional options. The other options don’t indicate EDNS0. The NXDOMAIN rcode is just a negative response code for a non-existent domain, unrelated to EDNS0. The HTTP Transfer-Encoding: chunked flag and the TCP Window Scale option pertain to HTTP and TCP, not DNS.

EDNS0 support is signaled by the presence of an OPT pseudo-record in the DNS message. This OPT record is a special extension (type 41) that lives in the Additional section and carries EDNS0-related parameters, such as the UDP payload size the responder can handle, the EDNS version, and flags (including the DNSSEC OK bit). Seeing this OPT pseudo-record shows that the message is using EDNS0 to extend DNS capabilities, like allowing larger UDP messages and additional options.

The other options don’t indicate EDNS0. The NXDOMAIN rcode is just a negative response code for a non-existent domain, unrelated to EDNS0. The HTTP Transfer-Encoding: chunked flag and the TCP Window Scale option pertain to HTTP and TCP, not DNS.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy