DNSSEC

http://technet.microsoft.com/en-us/library/jj200221.aspx

Resolve-DnsName is used for testing
Do not use the nslookup command line tool to test DNSSEC support for a zone. The nslookup tool uses an internal DNS client that is not DNSSEC-aware