What DNS record type would you use to verify domain ownership for a TLS certificate or to implement DMARC email policy?
- A.TXT record
- B.NS record
- C.A record
- D.SOA record
Why A is correct
TXT records store arbitrary text data and are used for: SPF (email sender authentication), DKIM public keys, DMARC policies, domain ownership verification (for TLS certs like Let's Encrypt, Google Search Console), and Microsoft 365/Google Workspace domain verification. Example: '_dmarc.example.com TXT v=DMARC1; p=reject; rua=mailto:dmarc@example.com'.
Know someone studying for Network Fundamentals? Send them this one.