Exam 70-413 topic 1 question 39 discussion

Actual exam question from Microsoft's 70-413

Question #: 39
Topic #: 1

You have a server named Server1 that runs Windows Server 2012. Server1 has the DNS Server server role installed.
You need to recommend changes to the DNS infrastructure to protect the cache from cache poisoning attacks.
What should you configure on Server1?

A. DNS cache locking
B. The global query block list
C. DNS Security Extensions (DNSSEC)
D. DNS devolution

Show Suggested Answer

Suggested Answer: A 🗳️
Cache locking is a new feature available if your DNS server is running Windows Server 2008 R2. When you enable cache locking, the DNS server will not allow cached records to be overwritten for the duration of the time to live (TTL) value. Cache locking provides for enhanced security against cache poisoning attacks.
Reference:

DNS Cache Locking -
https://technet.microsoft.com/en-us/library/ee683892(v=ws.10).aspx

by SummerSlumber at Oct. 2, 2020, 10:46 a.m.

Comments

Submit Cancel

SummerSlumber

4 years, 8 months ago

Cache locking is a new feature available if your DNS server is running Windows Server 2008 R2. When you enable cache locking, the DNS server will not allow cached records to be overwritten for the duration of the time to live (TTL) value. Cache locking provides for enhanced security against cache poisoning attacks.

upvoted 1 times

...