You are the network administrator for your company. The network contains Windows Server 2003 computers and Windows XP Professional computers. The company deploys two DNS servers. Both DNS servers run Windows Server 2003. One DNS server is inside of the corporate firewall, and the other DNS server is outside of the firewall. The external DNS server provides name resolution for the external Internet name of the company on the Internet, and it is configured with root hints. The internal DNS server hosts the DNS zones related to the internal network configuration, and it is not configured with root hints.You want to limit the exposure of the client computers to DNS-related attacks from the Internet, without limiting their access to Internet-based sites.
Which two actions should you take? (Each correct answer presents part of the solution. Choose two.)
A.
Configure the client computers to use only the internal DNS server.
B.
Configure the client computers to use both DNS servers. List the internal DNS server first.
C.
Configure the firewall to allow only network traffic on the DNS ports.
D.
On the internal DNS server, disable recursion.
E.
On the internal DNS server, configure the external DNS server as forwarder.
F.
On the internal DNS server, add the external DNS server as the only root hint.