You are the network administrator for a midsize computer company. You have a single Active Directory forest,
and your DNS servers are configured as Active Directory Integrated zones. When you look at the DNS records
in Active Directory, you notice that there are many records for computers that do not exist on your domain. You
want to make sure only domain computers register with your DNS servers. What should you do to resolve this
issue?
A.
Set dynamic updates to None.
B.
Set dynamic updates to Nonsecure And Secure.
C.
Set dynamic updates to Domain Users Only.
D.
Set dynamic updates to Secure Only.
http://technet.microsoft.com/en-us/library/cc753751.aspx
“DNS update security is available only for zones that are integrated into Active Directory Domain Services (AD DS).”
Interesting .. exam was on my 410.
Answer is D