What should you run?

You need to verify whether a DNS response from a DNS server is signed by DNSSEC.
What should you run?
A. Nslookup.exe
B. Dnscmd.exe
C. Get-NetIPAddress
D. Resolve-DNSName