It's trivial to audit a large deployment, you look at dns logs.