LPI

117-303 · Question #72

Which of the following can be done to secure a BIND server? (Select THREE correct answers)

The correct answer is A. Run the BIND daemon as a nonroot user. B. Configure ACLs. D. Run the BIND daemon in a chroot jail. See the full explanation below for the reasoning.

Question

Which of the following can be done to secure a BIND server? (Select THREE correct answers)

Options

ARun the BIND daemon as a nonroot user.
BConfigure ACLs.
CRequire clients to authenticate with a password before querying the server.
DRun the BIND daemon in a chroot jail
EEncrypt DNS traffic using SSL/TLS.

How the community answered

(41 responses)

A
73% (30)
C
20% (8)
E
7% (3)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full 117-303 Practice