साइबर सुरक्षा GRC 14 आइटम
DNS Security Controls Review
यह चेकलिस्ट अंग्रेज़ी में है।
Reviews DNS security controls across resolver protection, DNSSEC, protective filtering, logging, and registrar/zone integrity to defend against tunneling, hijacking, and abuse.
NIST 800-81NIST 800-53CIS v8
मुफ़्त PDF या Word · डाउनलोड करने के लिए अपना ईमेल दर्ज करें।
Resolver & Filtering
- Are endpoints restricted to approved internal or protective DNS resolvers? *
- Is protective DNS filtering used to block known-malicious domains? *
- Is outbound DNS to unauthorized external resolvers blocked at the firewall? *
- Is encrypted DNS (DoH/DoT) governed by policy rather than uncontrolled?
DNSSEC & Integrity
- Is DNSSEC signing enabled for authoritative zones you control? *
- Is DNSSEC validation enabled on recursive resolvers? *
- Are DNSSEC keys rotated and DS records maintained at the registrar?
Registrar & Zone Protection
- Is registrar/registry lock enabled to prevent unauthorized domain transfers? *
- Is MFA enforced on registrar and DNS management accounts? *
- Are zone changes subject to change control and review?
- Are critical domain expiration dates monitored and auto-renewal enabled?
Monitoring & Detection
- Are DNS query logs collected and retained for analysis? *
- Is DNS tunneling and anomalous query behavior monitored? *
- Are newly registered and typosquat lookalike domains monitored?
पूरी DNS Security Controls Review चेकलिस्ट डाउनलोड करें
इसे साफ़-सुथरे, प्रिंट करने योग्य PDF या संपादन योग्य Word दस्तावेज़ के रूप में मुफ़्त पाएँ।