Your network contains an ISA Server 2006 computer named ISA1, which controls access between three segments on the network. The network is configured as shown in the exhibit.
A network address translation (NAT) relationship exists from the Internal network to the perimeter network. A Windows Server 2003 computer named DNS1 functions as a DNS server.
Web Proxy clients can access Web sites on the Internet. However, when SecureNAT clients try to access hosts on the Internet, they receive the following error message: Cannot find server or DNS error.
You need to ensure that SecureNAT clients can perform DNS name resolution correctly for hosts on the Internet. You also need to ensure that DNS name resolution is optimized for Active Directory.
First, from a SecureNAT client, you run the nslookup command and set the default server to 172.16.0.11.
From the Nslookup console, you are able to query name server (NS) resource records on the Internet.
What should you do next?
A.
On ISA1, replace the DNS server publishing rule with an equivalent access rule.
B.
On ISA1, change the NAT relationship between the perimeter network and the Internal network to a route relationship.
C.
On AD1, delete the .(root) zone and then disable recursion.
D.
On DNS1, remove the forwarding configuration and add a .(root) zone.