Q. If the "DNSSEC Status" for DNSSEC Management is enabled, can I judge that DNSSEC validation of the relevant domain is executed properly?

No, you can't.

"Enabled" as the "DNSSEC Status" for DNSSEC Management indicates that the process of DNSSEC signature of this service is in an enabled state. It does not necessarily mean that DS records signed by this service exist in the higher zone and DNSSEC validation is executed properly.

* Whether validation can be executed properly is checked when the status of DNSSEC becomes "Enabled." However, even if you change NS records or DS records in the higher zone manually after the status has become "Enabled," the status of DNSSEC will not change from "Enabled." Therefore, you cannot judge if DNSSEC validation can be executed properly based on this information.