4.9 IG2
Control 4 / Secure Configuration of Enterprise Assets and Software
Configure Trusted DNS Servers on Enterprise Assets
In plain English
Devices are pointed at trustworthy DNS lookup services, so requests for a website are resolved to the real address and not a fake one.