Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1. DC1 hosts a standard primary zone for contoso.com.You discover that non-domain member computers register records in the contoso.com zone. All domain member computers must be allowed to register records in the contoso.com zone.
You need to prevent the non-domain member computers from registering records in the contoso.com zone.
What should you do first?
A.
Configure a trust anchor.
B.
Run the Security Configuration Wizard (SCW).
C.
Change the contoso.com zone to an Active Directory-integrated zone.
D.
Modify the security settings of the %SystemRoot%System32Dns folder.