Your network contains an Active Directory domain named contoso.com. The domain contains two sites named Site1 and Site2. The servers for the sites are configured as shown in the following table.Server name Server role Site name Server1 Domain controller, DNS Site1 Server2 DNS Site2 Server1 hosts a standard primary zone for contoso.com. Server2 hosts a secondary zone for contoso.com.You need to ensure that all DNS replication traffic between Server1 and Server2 is encrypted.What should you do？（）

A. On Server1, configure DNSSEC for the contoso.com zone.
B. On Server1, convert the contoso.com zone to an Active Directory-integrated zone.
C. On each server, create connection security rules.
D. On each server, enable Encrypting File System (EFS) encryption for the contoso.com.dns file.