3) 207.3 Securing a DNS server

Choose three DNS security strategies to protect information:

• Hiding the version numbering

• Cipher the DNS port

• Close the port 53

• Limiting access

• Limiting zone transfer

Choose two DNS security strategies to protect information:

• Limiting queries

• Cipher the DNS port

• Close the port 53

• Running BIND with less privileges

• Limiting OS upgrades

You're working on a DNS server with the IP address 172.17.97.200

Type the full command to get the BIND version the server is running:

Analyze the attached image.

What does the image statement do when is configured on the named.conf file?

• Hide the BIND client version

• Hide the BIND server version

• Hide the version of the OS

• Hide the BIND service to unauthorized servers.

Analyze the attached image.

What does the image statement do when is configured on the named.conf file?

• Creates an ACL for 192.168.1.0/24 host. These host are able to connect the server

• Creates a network ACL. Similar to a firewall.

• Creates an ACL for the IP range 192.168.1.0/24

• Hide the BIND service to unauthorized servers.

It consists of a series of subdomains separated by dots, like is presented in the image.

• domain

• zone

• FQDN

• URL

What does FQDN mean?

Choose two tools used to initiate zone transfers:

• dns-transfer

• xfer

• tsig

• dig

• host

"It's the mechanism to replicate DNS zone data from a master DNS server to one or more DNS servers":

• DNS migration

• DNS spreading

• Zone transfer

• DNS forwarding

Suppose the scenario where you are in a slave DNS server (172.16.0.25), and you ask the master DNS server (ns1.google.com) to transfer the zone "youtube.com" to the slave server.

How would you do that using the dig command?