Your network contains an Active Directory domain named contoso.com. The network contains 500 client
computers that run Windows 8. All of the client computers connect to the Internet by using a web proxy. You
deploy a server named Server1 that runs Windows Server 2012. Server1 has the DNS Server server role
installed. You configure all of the client computers to use Server1 as their primary DNS server.
You need to prevent Server1 from attempting to resolve Internet host names for the client computers.
What should you do on Server1?

A.
Configure the Security settings of the contoso.com zone.

B.
Remove all root hints.

C.
Create a primary zone named “.”.

D.
Create a primary zone named “root”.

E.
Create a primary zone named “GlobalNames”.

F.
Create a forwarder that points to 169.254.0.1.

G.
Create a stub zone named “root”.

H.
Create a zone delegation for GlobalNames.contoso.com.

Explanation:
B: necessary to remove the default root hints filesC: install a root (.) zone on all internal DNS servers to prevent
name resolution on the Internet
http://support.microsoft.com/kb/298148