Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam GCIH topic 1 question 682 discussion

Actual exam question from GIAC's GCIH
Question #: 682
Topic #: 1
[All GCIH Questions]

Following the recent acquisition of a new business, your manager asks you to investigate their DNS service and report back on its status. He is concerned as they only have one DNS server in the organization and it is visible on the Internet. What actions and recommendations should be taken as a first step?

  • A. Review the logs of the acquired business' firewall for port 53 traffic. Add a firewall rule to block port 53 traffic.
  • B. Ensure zone transfer requests from the acquired business' DNS server are disabled. Propose a plan to migrate the DNS service to your split-DNS infrastructure.
  • C. Use the nslookup command to direct the aquired business' DNS server to transfer its records to your primary DNS server. Block all other traffic at the firewall.
  • D. Remove the acquired business' DNS server from the network. Import its database entries into your secure infrastructure.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
strale
1 month, 2 weeks ago
It's B. By blocking 53 you would disable all DNS action (name resolvement and transfer) - this is not a solution. Best option is to disable unauthorised zone transfer and securly migrate DNS of new company to your infrastructure and split private and public DNS
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...