Hide version of bind :

options {
.....
version "[SECURED]";
};


Test version of bind :
Windows (cmd)

nslookup -q=txt -class=CHAOS version.bind 192.168.xxx.xxx


Linux

#dig -t txt -c chaos VERSION.BIND @192.168.xxx.xxx