Permitting only approved domains and their subdomains to be resolved.
https://d3fend.mitre.org/technique/d3f:DNSAllowlisting/