Your network contains an Active Directory domain named contoso.com. The network contains 500 client
computers that run Windows 8. All of the client computers connect to the Internet by using a web proxy.
You deploy a server named Server1 that runs WindowsServer 2012. Server1 has the DNS Server server role
installed.
You configure all of the client computers to use Server1 as their primary DNS server.
You need to prevent Server1 from attempting to resolve Internet host names for the client computers.
What should you do on Server1?
A.
Create a primary zone named “.”.
B.
Configure the Security settings of the contoso.com zone.
C.
Create a zone delegation for GlobalNames.contoso.com.
D.
Create a stub zone named “root”.
“A” is right
A is always the choice
but if you create primaryzone “.” doesn’t svr think it is root server. That wouldn’t prevent it from attempting to resolve. it just wouldn’t use internet root svr’s.
hence it fails, which is what we want.
“.” is a root zone. You don’t need to call it root specifically.
https://support.microsoft.com/en-us/kb/231794