What should you do?

You manage a domain controller that runs Windows Server 2008 R2 and the DNS Server server role. The DNS server hosts an Active Directory-integrated zone for your domain. You need to provide a user with the ability to manage records in the zone. The user must not be able to modify the DNS server settings.
What should you do?

A.
Add the user to the DNSUpdateProxy Global security group.

B.
Add the user to the DNSAdmins Domain Local security group.

C.
Grant the user permissions on the zone.

D.
Grant the user permissions on the DNS server.