How to answer 'How are public DNS records and domain registrations protected against hijacking?' on a SIG Lite
I. Reviewer Guidance & Pitfalls
Mention Registrar Lock, domain 2FA, DNSSEC, and single sign-on access to DNS management.
II. Example Answer Passing Enterprise Audit
Compliant Response
Sealed · IVS-17
Domain registrations enforce registrar locking and 2FA; DNS is managed through Cloudflare with DNSSEC enabled.
Filling out a CAIQ or SIG Lite right now?
QuietQuestionnaire drafts answers with citations pulled directly from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.
No spam · No credit card · Confidential by default