Secure Windows Server DNS
This module covers how to secure Windows Server DNS to protect your name resolution infrastructure. You learn how to implement split-horizon DNS to separate internal Active Directory-integrated DNS from internet-facing DNS servers, create DNS policies for scenarios including traffic management, geo-location-based routing, application load balancing, and split-brain DNS, implement and manage DNS policies using PowerShell cmdlets for granular query and zone transfer control, apply DNS security features including cache locking, DNS socket pool, and response rate limiting, and implement DNSSEC to cryptographically sign DNS zones and protect against spoofing and cache tampering.
Learning objectives
After completing this module, you'll be able to:
- Describe split-horizon DNS and explain how to implement it.
- Create DNS policies.
- Implement DNS policies.
- Describe the options for protecting the DNS server role.
- Implement DNS security.
Prerequisites
To get the best learning experience from this module, you should have knowledge and experience of:
- AD DS concepts and technologies.
- Windows Server DNS role.
- Core networking technologies.
- Basic security best practices.
- Windows PowerShell basics.