Choose the DNS server setting that will prevent an existing host and its IP address from...
Accenture technical mcq question, verified with a worked answer. Free to practise - no sign-up.
Choose the DNS server setting that will prevent an existing host and its IP address from being known.
Show answer & explanation
A zone transfer is the mechanism by which DNS zone data (containing all host records and their IP addresses) is replicated from a primary DNS server to secondary servers. By restricting zone transfers to authorized sources only, you prevent unauthorized parties from enumerating hosts and their IP addresses. Options A, C, and D relate to mail relay, web servers, and directory listings respectively—none directly prevent DNS host-to-IP disclosure.
Step-by-step Derivation:
DNS security question analyzing different server configurations: (A) Mail relay control → prevents spam, not host enumeration. (B) Zone transfer control → restricts who can request the complete DNS zone database containing all host-IP mappings → PREVENTS host/IP discovery. (C) CGI directory restrictions → web server security, unrelated to DNS. (D) Directory listing prohibition → web server feature, not DNS-related. Answer: B