Your network contains an Active Directory domain named contoso.com. The domain contains two
domain controllers named DC1 and DC2 that run Windows Server 2008 R2. DC1 hosts a primary zone
for contoso.com. DC2 hosts a secondary zone for contosto.com. You need to ensure that DNS zone
data is encrypted when the data replicates across the network. DC2 must provide authoritative
responses to client computers. What should you do?
A.
Configure the contoso.com zone to use DNSSEC.
B.
Create a new delegation in the contoso.com zone.
C.
Modify the zone transfer settings of the contoso.com zone.
D.
Convert the contoso.com zone to an Active Directory-integrated zone.
Explanation: