Depends on the network, there is no right or wrong answer.
Personally: Two DNS servers, issue each server to clients in the DHCP offer. Set these DNS servers as the ones used by your firewall so you can use internal hostnames for things like RADIUS servers, LDAP lookups etc. For looking up Internet addresses either add forwarders to your DNS servers or use the root servers.