Your network consists of a single Active Directory domain named contoso.com.All servers run Windows Server 2003 Service Pack 2 (SP2).
You plan to deploy a new DNS zone named adatum.com.
You need to ensure that only computers in the contoso.com domain can update host records in the new DNS zone.
What should you do?

A.
Create a new Active Directory forest named adatum.com.

B.
Create a new Active Directory-integrated zone named adatum.com.

C.
Create a new standard primary zone named adatum.com.Disable round robin.

D.
Create a new standard primary zone named adatum.com.Disable netmask ordering.