Assessment Objective
Determine if:
- SC-20a.
- SC-20a.[01] additional data origin authentication is provided along with the authoritative name resolution data that the system returns in response to external name/address resolution queries;
- SC-20a.[02] integrity verification artifacts are provided along with the authoritative name resolution data that the system returns in response to external name/address resolution queries;
- SC-20b.
- SC-20b.[01] the means to indicate the security status of child zones (and if the child supports secure resolution services) is provided when operating as part of a distributed, hierarchical namespace;
- SC-20b.[02] the means to enable verification of a chain of trust among parent and child domains when operating as part of a distributed, hierarchical namespace is provided.
Assessment Methods
Examine
- System and communications protection policy
- procedures addressing secure name/address resolution services (authoritative source)
- system design documentation
- system configuration settings and associated documentation
- system security plan
- other relevant documents or records
Interview
- System/network administrators
- organizational personnel with information security responsibilities
- organizational personnel with responsibilities for managing DNS
Test
- Mechanisms supporting and/or implementing secure name/address resolution services
Povezani zadaci
| Vrsta poveznice | Zadatak |
|---|---|
| blocks | SC-20 [L] Secure Name/Address Resolution Service (Authoritative Source) |