Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 (SP2).You plan to deploy a new DNS zone named adatum.com. You need to ensure that only computers in the contoso.com domain can update host records in the new DNS zone. What should you do?（）

• A、Create a new Active Directory forest named adatum.com. 
• B、Create a new Active Directory-integrated zone named adatum.com. 
• C、Create a new standard primary zone named adatum.com. Disable round robin. 
• D、Create a new standard primary zone named adatum.com. Disable netmask ordering.