Your network contains an Active Directory domain named contoso.com. The domain contains two sites named Site1 and Site2. The servers for the sites are configured as shown in the following table.
Server1 hosts a standard primary zone for contoso.com. Server2 hosts a secondary zone for contoso.com.
You need to ensure that all DNS replication traffic between Server1 and Server2 is encrypted.
What should you do?
A.
On Server1, configure DNSSEC for the contoso.com zone.
B.
On Server1, convert the contoso.com zone to an Active Directory-integrated zone.
C.
On each server, create connection security rules.
D.
On each server, enable Encrypting File System (EFS) encryption for the contoso.com.dns file.
answer B should be correct because all AD Replication is encrypted, correct? http://technet.microsoft.com/en-us/library/cc781101(v=ws.10).aspx
Ed:
Its a trick question of sorts. Server 2 is not a DC therefore can’t have that type of zone