You must design and deploy a DNS namespace that will be the most appropriate for the company network and supports an external presence (Segment A) and an Active Directory domain (segment B). Segment A (www.montreal.org) (or other appropriate name) The segment A will contain the DNS server IDEFIX and will serve as the external public zone. You must configure IDEFIX as a server that is located in an environment that is potentially at risk and non-secure. Plan and implement a zone that represents the most appropriate solution that will provide the best security under circumstances for this external (public) zone. For obvious reasons, the DNS server must have a primary zone that is file based. You must prevent all information exchange between the two DNS servers. Zone transfer will not be configured or permitted. The minimum number of records that will exist in the primary zone of the DNS server will be created by the administrator as required based on needs. Note: Keep in mind that www.montreal.org must be supported. Segment B Implement a zone that represents the most appropriate that will allow for the best possible security for the internal zone (Active Directory). Configure the Active Directory domain as described in the previous section. The records in this zone will be dynamically created. It is imperative that the users that are part of this domain (Members of the Active Directory) be able to obtain a name resolution from both of the DNS servers. The users of this zone must also be able to access the site.