You have a server named Server1 that runs Windows Server 2012. Server1 has the DNS Server role
installed.
You need to recommend changes to the DNS infrastructure to protect the cache from cache poisoning
attacks.
What should you configure on Server1?

A.
DNS cache locking

B.
The global query block list

C.
DNS Security Extensions (DNSSEC)

D.
DNS devolution

Explanation:
Cache locking is a new feature available if your DNS server is running Windows Server 2008 R2. When
you enable cache locking, the DNS server will not allow cached records to be overwritten for the
duration of the time to live (TTL) value. Cache locking provides for enhanced security against cache
poisoning attacks.
DNS Cache Locking
https://technet.microsoft.com/en-us/library/ee683892(v=ws.10).aspx