Your company has a single Active Directory domain named intranet.adatum.com. The domain controllers run Windows Server 2008 and the DNS server role. All computers, including non-domain members, dynamically register their DNS records. You need to configure the intranet.adatum.com zone to allow only domain members to dynamically register DNS records.
What should you do?

A.
Set dynamic updates to Secure Only.

B.
Remove the Authenticated Users group.

C.
Enable zone transfers to Name Servers.

D.
Deny the Everyone group the Create All Child Objects permission.