The security team for Company XYZ has determined that someone from outside the organization has obtained sensitive information about the internal organization by querying the external DNS server of…

Question

Options

• AImplement a split DNS, only allowing the external DNS server to contain information about domains
• BImplement a split DNS, only allowing the external DNS server to contain information about internal
• CImplement a split DNS, only allowing the external DNS server to contain information about domains
• DImplement a split DNS, only allowing the internal DNS server to contain information about domains

• A
  75% (12)
• B
  6% (1)
• C
  6% (1)
• D
  13% (2)

Explanation

Split DNS (also called split-horizon or split-brain DNS) maintains two separate DNS zones: an external zone that contains only records for publicly accessible resources (e.g., the company's web server and mail server), and an internal zone that contains the full internal network topology. By restricting the external DNS to only publicly necessary records, outside parties querying the external DNS server gain no information about internal hostnames, IP ranges, or network structure. This directly prevents the reconnaissance attack described. Option B would incorrectly expose internal information on the external DNS. Option D describes putting external information on the internal DNS, which is backwards and provides no protection.

No community discussion yet for this question.