问题：

[单选] Your company has a main office and a branch office. The company has a single-domain Active Directory forest. The main office has two domain controllers named DC1 and DC2 that run Windows Server 2008. The branch office has a Windows Server 2008 read-only domain controller （RODC） named DC3. All domain controllers hold the DNS Server role and are configured as Active Directory-integrated zones. The DNS zones only allow secure updates. You need to enable dynamic DNS updates on DC3. What should you do（）

A . Run the Ntdsutil.exe > DS Behavior commands on DC3.
B . Run the Dnscmd.exe /ZoneResetType command on DC3.
C . Reinstall Active Directory Domain Services on DC3 as a writable domain controller.
D . Create a custom application directory partition on DC1. Configure the partition to store Active Directory- integrated zones.