You work as an administrator at ABC.com. The ABC.com network has an Active Directory domain named ABC.com. All servers on the ABC.com network have Windows Server 2008 R2 installed and all workstations have Windows 7 installed.

The ABC.com domain has two domain controllers, named ABC-DC01 and ABC-DC02, which are also configured as DNS servers. The DNS zone for ABC.com is Active Directory-integrated, and configured for secure dynamic updates only.

You have received instructions to configure the ABC.com zone to only accept updates from either domain controllers, or servers that form part of the domain.

Which combination of the following actions should you take?

A.
You should navigate to the Security tab of the ABC.com DNS zone properties. You should then remove the Authenticated Users account, and enable the Create All Child Objects permission option for ABC.com’s server computer accounts.

B.
You should consider modifying the zone replication scope. You should then navigate to the Security tab of the ABC.com DNS zone properties and enable the Create All Child Objects permission option for ABC.com’s server computer accounts.

C.
You should consider modifying the zone replication scope. You should then navigate to the Security tab of the ABC.com DNS zone properties and enable the Write All Properties permission option for the computer accounts of ABC.com’s servers.

D.
You should navigate to the Security tab of the ABC.com DNS zone properties. You should then navigate to the Security tab of the ABC.com DNS zone properties and enable the Write All Properties permission option for the computer accounts of ABC.com’s servers.