207.1 Basic DNS Server Configuration (weight: 3) LPIC-2 Practice Questions (Page 4)

Questions 16–17

1. 16expert · hard

   A company has a DNS server that is authoritative for 'example.com' and also provides recursion for internal clients. They have noticed that the server is being used in DNS amplification attacks. To mitigate this, they want to restrict recursion to only internal clients and also limit the size of DNS messages. Which configuration changes should they make?

   • ASet 'allow-recursion' to the internal network and set 'max-udp-size' to a smaller value.
   • BSet 'recursion no' and use a separate recursive server.
   • CSet 'allow-transfer' to the internal network and set 'max-cache-size' to a smaller value.
   • DSet 'allow-query' to the internal network and set 'recursion no'.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A BIND server is configured with multiple zones. The administrator wants to allow recursive queries only for clients on the internal network 10.0.0.0/8, while still serving authoritative answers to the public. Which configuration accomplishes this?

   • Aoptions { allow-recursion { 10.0.0.0/8; }; };
   • Boptions { allow-query { 10.0.0.0/8; }; };
   • Coptions { recursion no; };
   • Doptions { allow-transfer { 10.0.0.0/8; }; };
   Reveal Solution Discussion Select an answer first