Your network contains an Active Directory domain. The domain contains two domain controllers named DC1 and DC2.
DC1 hosts a standard primary DNS zone for the domain. Dynamic updates are enabled on the zone. DC2 hosts a standard secondary DNS zone for the domain. You need to configure DNS to allow only secure dynamic updates.
What should you do first?

A.
On DC1 and DC2, configure a trust anchor.

B.
On DC1 and DC2, configure a connection security rule.

C.
On DC1, configure the zone transfer settings.

D.
On DC1, configure the zone to be stored in Active Directory.