# DNS Administration & Security

> Master DNS architecture, record types, zone transfers, and learn how to secure DNS against reconnaissance and tunneling attacks.

Canonical: https://codelivly.com/rooms/dns-administration-security
Last updated: 2026-09-03

| | |
|---|---|
| Level | Intermediate |
| Category | Networking |
| Lessons | 5 |
| Estimated time | 30 min |
| XP | 200 |

Domain Name System (DNS) is the backbone of network resolution, but it is also a prime target for attackers. This module covers the core mechanics of DNS administration, including record types (A, AAAA, CNAME, MX, TXT, SRV), zone file management, and recursive versus authoritative resolution. You will learn how attackers exploit misconfigured DNS for reconnaissance (zone transfers) and covert data exfiltration (DNS tunneling). Finally, you will implement defensive controls like DNSSEC, split-horizon DNS, and strict query logging to harden your infrastructure against abuse.

## Lessons

1. What Is DNS and Why Does It Matter (30 min)
2. DNS Record Types & Zone Files (30 min)
3. Configuring an Authoritative DNS Server (30 min)
4. DNS Forwarding & Caching (30 min)
5. Guided Lab: Deploying and Troubleshooting a DNS Server (30 min)

## Related

- [Learning path: Network Services Administration](https://codelivly.com/learning-paths/network-services-administration)
- [All rooms](https://codelivly.com/rooms)