Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1. DC1 hosts a standard primary zone for contoso.com. You discover that non-domain member computers register records in the contoso.com zone.

You need to prevent the non-domain member computers from registering records in the contoso.com zone. All domain member computers must be allowed to register records in the contoso.com zone.

What should you do first?

A.
Configure a trust anchor.

B.
Run the Security Configuration Wizard (SCW).

C.
Change the contoso.com zone to an Active Directory-integrated zone.

D.
Modify the security settings of the %SystemRoot%System32Dns folder.