1Z0-1124-25 practice question 19 of 25

You have configured DNSSEC for your domain hosted on OCI DNS. You understand the importance of regularly rotating your Key Signing Key (KSK) to maintain security best practices. Which of the following statements regarding KSK rotation in OCI DNS is TRUE?

Answer options

A: KSK rotation is a fully automated process managed by OCI DNS and requires no manual intervention.

B: You must manually generate a new KSK and ZSK pair and upload them to OCI DNS to initiate a KSK rotation.

C: KSK rotation in OCI DNS involves enabling a "KSK Rollover" feature, which automatically handles the key rotation process while minimizing disruption to DNS resolution. Correct answer

D: KSK rotation is not supported in OCI DNS; you must migrate your DNS zone to another provider if you require KSK rotation.

Correct Answer:

C. KSK rotation in OCI DNS involves enabling a "KSK Rollover" feature, which automatically handles the key rotation process while minimizing disruption to DNS resolution.

Explanation

Objective: Identify the true statement about KSK rotation in OCI DNS.
Option A: OCI DNS automates much of the process but requires user initiation, not fully automated— incorrect.
Option B: OCI DNS generates keys internally; manual generation and upload aren’t required— incorrect.
Option C: OCI DNS offers a “KSK Rollover” feature that, once enabled, automates the rotation process, ensuring minimal disruption—correct.
Option D: KSK rotation is supported via the rollover feature—incorrect. Conclusion: Option C accurately describes OCI DNS KSK rotation. Oracle documentation confirms: "OCI DNS supports KSK rotation through the KSK Rollover feature. Enable it to automatically rotate keys while maintaining DNS resolution continuity." This validates Option C. Reference: DNSSEC in OCI DNS - Oracle Help Center (docs.oracle.com/en- us/iaas/Content/DNS/Tasks/managingdnssec.htm).

Keep practicing

Take the free 1Z0-1124-25 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test