Which statement correctly describes AD-integrated DNS zones and their behavior?

• A. AD-Integrated zones store DNS data in a flat file on one server only.
• B. AD-Integrated zones store DNS data in Active Directory and replicate with AD, enabling secure dynamic updates.
• C. AD-Integrated zones require manual zone transfers for replication.
• D. AD-Integrated zones do not support dynamic updates.

Answer: (B)

AD-integrated DNS zones place their data inside Active Directory itself, not in separate zone files. Because the data lives in AD, DNS information is replicated using AD’s multi-master replication, so any domain controller that hosts the zone can update records and those changes automatically propagate to others. This design enables secure dynamic updates, meaning records can be added or changed by authenticated and authorized clients or services, with changes protected by AD security. Descriptions that treat the zone as a flat file on one server, require manual zone transfers for replication, or claim dynamic updates aren’t supported do not reflect how AD-integrated zones operate.