You need to ensure a user is able to modify records in the nwtraders.com zone

Your network consists of an Active Directory forest that contains one domain named
contoso.com. All domain controllers run Windows Server 2008 R2 and are configured as
DNS servers. You have two Active Directory-integrated zones: contoso.com and
nwtraders.com.
You need to ensure a user is able to modify records in the nwtraders.com zone. The solution
must prevent the user from modifying the SOA record in the contoso.com zone.
What should you do?

A.
From the DNS Manager console, modify the permissions of the nwtraders.com zone.
B.From the DNS Manager console, modify the permissions of the contoso.com zone.
C.From the Active Directory Users and Computers console, run the Delegation of Control
Wizard.
D.From the Active Directory Users and Computers console, modify the permissions of the
Domain Controllers organizational unit (OU).