Page 105 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
Microsoft states: “This article describes the compatibility of Microsoft Exchange with Single Label Domains, Disjoint Namespaces, and Discontiguous Namespaces.”
Read the guide
Microsoft states: “In AD-integrated DNS zones that are hosted on domain controllers (Windows Server 2012 R2 or later versions), DNS can’t enumerate the zones or intermittently fail to create or write records.”
Read the playbook
Microsoft states: “This article describes how to prevent domain controllers from dynamically registering DNS names.”
Read the briefing
Microsoft states: “This article helps resolve an issue in which Domain Name System (DNS) zone transfer fails when using the Only to servers listed in the Name servers tab setting.”
Read the checklist
Microsoft states: “This article describes the netmask ordering feature and the round robin feature and how to use these features together.”
Read the explainer
Microsoft states: “You can use this topic to learn how to configure DNS policy to perform application load balancing.”
Read the guide
Microsoft states: “This article discusses how to troubleshoot issues from DNS clients.”
Read the playbook
Microsoft states: “Starting with Windows Server 2022, the DNS client supports DNS-over-HTTPS (DoH).”
Read the briefing
Microsoft states: “Traditional DNS uses unencrypted UDP or TCP messages on port 53, which exposes DNS traffic to passive monitoring, traffic analysis, and active manipulation by attackers.”
Read the checklist
Microsoft states: “Domain Name System Security Extensions (DNSSEC) is a suite of extensions that add security to the Domain Name System (DNS) protocol by enabling DNS responses to be validated.”
Read the explainer