Skip to content

II - Mission Support Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000516-DNS-000089

    Group
  • The Windows DNS Server must be configured to enable DNSSEC Resource Records (RRs).

    The specification for a digital signature mechanism in the context of the DNS infrastructure is in the Internet Engineering Task Force's (IETF's) DNSSEC standard. In DNSSEC, trust in the public key...
    Rule High Severity
  • SRG-APP-000516-DNS-000090

    Group
  • The digital signature algorithm used for DNSSEC-enabled zones must be FIPS-compatible.

    The choice of digital signature algorithm will be based on recommended algorithms in well-known standards. NIST's Digital Signature Standard (DSS) (FIPS186) provides three algorithm choices: - Digi...
    Rule Medium Severity
  • SRG-APP-000516-DNS-000091

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules