you need to configure server1 to support the dnssec evaluation what two actions should you perform