You need to ensure that DNS records can only be updated by the computer that registered the record

Your network contains an Active Directory domain. All DNS servers are domain controllers.
You view the properties of the DNS zone as shown in the exhibit. (Click the Exhibit button.)

You need to ensure that DNS records can only be updated by the computer that registered
the record.
What should you do first?

A.
Modify the Dynamic updates setting.

B.
Create a trust anchor.

C.
Modify the zone type.

D.
Modify the Advanced properties of the DNS server.