you need to configure server1 to support the dnssec evaluation which two actions should you perform?