Your network contains an Active Directory domain named contoso.com. The domain contains a
server named Server1 that runs Windows Server 2012 R2 and has the DNS Server server role
installed. Server1 has a zone named contoso.com.
The zone is configured as shown in the exhibit. (Click the Exhibit button.)

You need to assign a user named User1 permission to add and delete records from the
contoso.com zone only.
What should you do first?

A.
Enable the Advanced view from DNS Manager.

B.
Add User1 to the DnsUpdateProxy group.

C.
Run the New Delegation Wizard.

D.
Configure the zone to be Active Directory-integrated.

Explanation:
Secure dynamic updates are only supported or configurable for resource records in zones that
are stored in Active Directory Domain Services (AD DS).
Note: To modify security for a resource record
Open DNS Manager.
In the console tree, click the applicable zone.
In the details pane, click the record that you want to view.
On the Action menu, click Properties.
On the Security tab, modify the list of member users or groups that are allowed to securely
update the applicable record and reset their permissions as needed.