Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The DNS implementation must notify the user of security-related changes to the users account occurring during the organization defined time period.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-33941 | SRG-NET-000052-DNS-000029 | SV-44394r1_rule | Low |
| Description |
|---|
| Notifying the user of account changes mitigates the risk of an attacker modifying an account without the user's knowledge and potentially gaining unauthorized access to the system or other systems the user or administrator is responsible for. |
| STIG | Date |
|---|---|
| Domain Name System (DNS) Security Requirements Guide | 2012-10-24 |
Details
| Check Text ( C-41950r1_chk ) |
|---|
| Review the DNS system configuration to determine if the system is configured to notify the user of any security-related account changes during the specified period of time. If the system is not configured to notify the user of any account changes, during the specified period of time, this is a finding. |
| Fix Text (F-37854r1_fix) |
|---|
| Configure the DNS system to notify the user of any security-related account changes during the specified period of time. |