Vulnerable to DNS spoofing and cache poisoning attacks.
DNS amplification can be exploited for DDoS attacks.
Lacks built-in authentication and encryption.
Implement DNSSEC to validate DNS responses.
Monitor and restrict DNS traffic using rate limiting.
Harden DNS servers against known vulnerabilities.
Unexpected DNS resolutions or traffic anomalies.
Large DNS responses indicate possible amplification attacks.
Unusual queries or changes to DNS records.