Question

You have noticed that one of your DNS servers has possibly been compromised. You believe that a cached DNS entry for your domain is being targeted by an attacker. What new feature in Windows Server 2016 could you use on your DNS server to help prevent a man-in-the-middle attack in which your cached DNS entry for your domain is altered by an attacker?

Answer 1

Answer:

DNS-based Authentication of Named Entities .

Explanation:

While realizing how one of the DNS servers could have been affected. He thinks an intruder is targeting a stored DNS record for his domain.

So, the DNS-based Named Entities Authentication in Windows Server 2016 should be used on the user's DNS server to try to prevent a man-in-the-middle attempt from which an intruder changes his stored DNS record for the user's domain.