Page 83 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
Microsoft states: “The Add-DnsServerSigningKey cmdlet adds a Key Signing Key (KSK) or Zone Signing Key (ZSK) key to a Domain Name System (DNS) signed zone.”
Read the guide
Microsoft states: “The Set-DnsServerClientSubnet cmdlet updates the IP addresses in a client subnet on a Domain Name System (DNS) server.”
Read the playbook
Microsoft states: “The Remove-DnsServerRootHint cmdlet removes root hints from the list of root hints on a Domain Name System (DNS) server.”
Read the briefing
Microsoft states: “Removes a name server or delegation from a DNS zone.” It also states: “The Remove-DnsServerZoneDelegation cmdlet removes a name server or delegation from a Domain Name System (DNS) zone.”
Read the checklist
Microsoft states: “Transfers the role of Key Master for a DNS zone.” It also states: “The Reset-DnsServerZoneKeyMasterRole cmdlet transfers the role of DNS Security (DNSSEC) Key Master server.”
Read the explainer
Microsoft states: “The Add-DnsServerDirectoryPartition cmdlet creates a Domain Name System (DNS) application directory partition.”
Read the guide
Microsoft states: “The Invoke-DnsServerZoneSign cmdlet signs a Domain Name System (DNS) server zone.”
Read the playbook
Microsoft states: “Rolls over a KSK that is waiting for a parent DS update.” It also states: “The Step-DnsServerSigningKeyRollover cmdlet rolls over a key signing key (KSK) that is waiting for an update from a parent delegation signer (DS).”
Read the briefing
Microsoft states: “Tests that a specified computer is a functioning DNS server.”
Read the checklist
Microsoft states: “Starts a zone transfer for a secondary DNS zone from master servers.”
Read the explainer