You need to ensure that DC2 can resolve DNS queries for ad.contoso.com in the event that a WAN link fails