STIGQter: STIG Summary: Microsoft Windows Server Domain Name System (DNS) Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Jul 2026:

The Windows DNS Server audit records must be backed up at least every seven days onto a different system or system component than the system or component being audited.

DISA Rule

SV-259415r960948_rule

Vulnerability Number

V-259415

Group Title

SRG-APP-000125-DNS-000012

Rule Version

WDNS-22-000115

Severity

CAT II

CCI(s)

• CCI-001348 - Store audit records on an organization-defined frequency in a repository that is part of a physically different system or system component that the system or component being audited.

Weight

10

Fix Recommendation

Document and implement a backup policy to back up the DNS server's audit records at least every seven days.

Check Contents

Consult with the system administrator to determine the backup policy in place for Windows DNS Server.

Review the backup methods used and determine if the backup's methods have been successful at backing up the audit records at least every seven days.

If the organization does not have a backup policy in place for backing up the Windows DNS Server's audit records and/or the backup methods have not been successful at backing up the audit records at least every seven days, this is a finding.

Vulnerability Number

V-259415

Documentable

False

Rule Version

WDNS-22-000115

Severity Override Guidance

Consult with the system administrator to determine the backup policy in place for Windows DNS Server.

Review the backup methods used and determine if the backup's methods have been successful at backing up the audit records at least every seven days.

If the organization does not have a backup policy in place for backing up the Windows DNS Server's audit records and/or the backup methods have not been successful at backing up the audit records at least every seven days, this is a finding.

Check Content Reference

M

Target Key

5576