You can hide the version of BIND you use to increase security.
nano /etc/bind/named.conf.options
Then look for:
dnssec-enable yes; dnssec-validation yes; dnssec-lookaside auto;
Add this line:
version "unknown";
Don’t forget to restart the service!