Practices (7) Configure a sub domain for dynamic update dyn.soiN.jinmei.org start with a small set of RRs set up update policy for a name see the "self" rule in slide "2/4" Try to update the configured name with nsupdate confirm the granted data is updated confirm not granted data cannot be updated what if you don't specify the key? what if the system clocks are not synchronized? try that from another machine with a delayed clock