Your network contains an Active Directory domain named contoso.com.
The domain contains a domain controller named DC1 that runs Windows Server 2012 R2.
On DC1, you open DNS Manager as shown in the exhibit. (Click the Exhibit button.)
You need to change the replication scope of the contoso.com zone.
What should you do before you change the replication scope?
A.
Modify the Zone Transfers settings.
B.
Add DC1 to the Name Servers list.
C.
Add your user account to the Security settings of the zone.
D.
Unsign the zone.
Explanation:
Lock icon signifies that the Zone has been signed. Changes to the zone are blocked when signed
http://www.microsoft.com/en-us/download/dlx/ThankYou.aspx?id=29018
you ‘nimwit’. what lock icon?
idiot it is on the pic on contoso.
D.
When you sign the zone with DNSSEC, you get the lock icon on the zone.
If you try to change the replication settings, you get a message saying you can’t change the replication settings of a signed zone.