An AD DS environment needs DNS zone data replicated through Active Directory with secure dynamic updates. Which zone type should be used?

1. A hosts file distributed manually to every computer
2. A standard secondary zone as the writable primary
3. An AD-integrated zone with the appropriate replication scope
4. A reverse lookup zone as a complete replacement for forward lookup