Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1 that runs Windows Server 2012 R2 and has the DNS Server server role installed.
Server1 has a zone named contoso.com. The zone is configured as shown in the exhibit. (Click the Exhibit
button.)

You need to assign a user named User1 permission to add and delete records from the contoso.com zone
only.
What should you do first?

A.
Enable the Advanced view from DNS Manager.

B.
Add User1 to the DnsUpdateProxy group.

C.
Run the New Delegation Wizard.

D.
Configure the zone to be Active Directory-integrated.

Explanation:
Secure dynamic updates are only supported or configurable for resource records in zones that are stored in
Active Directory Domain Services (AD DS).
Note: To modify security for a resource record
Open DNS Manager.
In the console tree, click the applicable zone.
In the details pane, click the record that you want to view.
On the Action menu, click Properties.
On the Security tab, modify the list of member users or groups that are allowed to securely update the
applicable record and reset their permissions as needed.
Modify Security for a Resource Record