Your network contains an Active Directory domain named fabrikam.com. The domain contains five
domain controllers named DC1, DC2, DC3, DC4, and DC5. All domain controllers run Windows Server
2008 R2 and have the DNS server role installed. On DC5, you create a new Active Directoryintegrated DNS zone named adatum.com. You need to ensure that the adatum.com DNS zone is only
replicated to DC5 and DC2. The solution must ensure that all zone replication traffic is encrypted.
What should you do first?

A.
Create an application directory partition.

B.
Create a primary zone.

C.
Modify the zone transfer settings.

D.
Change the zone replication scope.

Explanation: