During a recent security assessment, you discover the organization has one Domain Name Server (DNS) in a Demilitarized Zone (DMZ) and a second DNS server on the internal network. What is this type of

DynDNS (Dynamic DNS) is a service that automatically updates DNS records for a dynamically assigned IP address.

DNS scheme is a generic term and not a specific configuration type.

DNSSEC (DNS Security Extensions) adds cryptographic authentication to DNS to protect against spoofing and tampering, but it's not a configuration for separating internal and external zones.

Split DNS (also known as split-horizon DNS) is a configuration where an organization uses different DNS servers or different views on the same server to provide different DNS responses based on whether the query originates from an internal or external network. This allows internal clients to resolve internal names not visible externally, while external clients only see public-facing records, enhancing security and manageability.