Select the key question you would use to ask your customer related to DNS attacks?

Asking about over-provisioning addresses capacity and availability planning, not security hardening or attack mitigation strategy.

Asking only about BIND patching is too narrow - it confirms one specific operational practice without surfacing the broader DNS security posture.

Asking whether the customer relies solely on a network firewall implies a specific single-control strategy rather than opening a dialogue about comprehensive DNS defense.

Asking 'How do you secure your DNS infrastructure against attacks?' opens a comprehensive consultative dialogue about the customer's entire DNS security strategy. It invites the customer to reveal gaps across patching, architecture, monitoring, and access controls simultaneously. This broad framing is the foundation of a security discovery conversation and uncovers opportunities a narrow question would miss.