Your network consists of a single Active Directory domain named contoso.com. All servers run Windows Server 2003 Service Pack 2 （SP2）. You plan to deploy a new DNS zone named adatum.com. You need to ensure that only computers in the contoso.com domain can update host records in the new DNS zone. What should you do？（）

• A、Create a new Active Directory forest named adatum.com.
• B、Create a new Active Directory-integrated zone named adatum.com.
• C、Create a new standard primary zone named adatum.com. Disable round robin.
• D、Create a new standard primary zone named adatum.com. Disable netmask ordering.