You have a DNS server named Server1 that runs Windows Server 2016. Server1 has a DNSSEC-signed zone named.contoso.com. You need to implement DNS-based Authentication of Named Entities (DANE).
What should you do?
A . From PowerShell, run the Add-DnsServerResourceRecord cmdlet and specify virtualizationInstance parameter.
B . From PowerShell, run the Add-DnsServerResourceRecord cmdlet and specify -TLSA parameter.
C . From DNS Manager modify the security of Server1
D . From DNS Manager modify the advanced properties of contoso.com.
Answer: B