What SP specifies how to run name server software with restricted privileges?

• A. 800-81 Secure DNS Deployment Guide
• B. 800-113 Guide to SSL VPN
• C. 800-53 Rev 4
• D. 800-37 Guide for Security Authorization

Answer: (A)

This item checks knowledge of which NIST Special Publication provides guidance specifically on securely deploying DNS services. The Secure DNS Deployment Guide (NIST SP 800-81) covers how to run name server software with restricted privileges, focusing on least-privilege operation and proper isolation of DNS services to reduce risk if the DNS server is compromised.

In contrast, the SSL VPN guide (SP 800-113) focuses on securing SSL VPNs, SP 800-53 Rev 4 lists a broad catalog of security controls, and SP 800-37 guides the security authorization process. That combination shows why the DNS-specific guidance is the correct reference for running name servers with restricted privileges.