Câu 181: GCIH: GIAC Certified Incident Handler

Following the recent acquisition of a new business, your manager asks you to investigate their DNS service and report back on its status. He is concerned as they only have one DNS server in the organization and it is visible on the Internet. What actions and recommendations should be taken as a first step?

1. A. Review the logs of the acquired business' firewall for port 53 traffic. Add a firewall rule to block port 53 traffic. — đáp án hiện tại
2. B. Ensure zone transfer requests from the acquired business' DNS server are disabled. Propose a plan to migrate the DNS service to your split-DNS infrastructure.
3. C. Use the nslookup command to direct the aquired business' DNS server to transfer its records to your primary DNS server. Block all other traffic at the firewall.
4. D. Remove the acquired business' DNS server from the network. Import its database entries into your secure infrastructure.