Your network contains an Active Directory domain named contoso.com. The DNS zone for contoso.com is
Active-Directory integrated.
The domain contains 500 client computers. There are an additional 20 computers in a workgroup.
You discover that every client computer on the network can add its record to the contoso.com zone.
You need to ensure that only the client computers in the Active Directory domain can register records in the
contoso.com zone.
What should you do?
A.
Sign the contoso.com zone by using DNSSEC.
B.
Configure the Dynamic updates settings of the contoso.com zone.
C.
Configure the Security settings of the contoso.com zone.
D.
Move the contoso.com zone to a domain controller that is configured as a DNS server.
Enable only secure dynamic updates
Click Start, point to Administrative Tools, and then click DNS.
Under DNS, double-click the applicable DNS server, double-click Forward Lookup Zones or Reverse Lookup Zones, and then right-click the applicable zone.
Click Properties.
On the General tab, verify that the zone type is Active Directory-integrated.
In the Dynamic updates box, click Secure only.
Click OK.