Challenges, Benefits, and Global Adoption After Implementing DNSSEC in Active Directory DNS

Question

I have some questions about DNSSEC, so first, let me explain my scenario.

In my environment, which includes Active Directory, Exchange Server, web applications, and more, I am considering configuring DNSSEC in the Active Directory DNS. Additionally, I am contemplating configuring Time limits for the recursive DNS query response and the status of Response Rate Limiting (RRL) and DNS Socket pool utilization.

So please clarify regarding the following questions.

1. What types of challenges should I anticipate in this scenario?
2. Can you provide a real scenario of challenges that may arise after implementing these configurations?
3. Is DNSSEC recommended by Microsoft for deployment in such environments?
4. What are the advantages and disadvantages it?
5. Additionally, I'm interested in understanding the current global adoption and usage of DNSSEC for enhancing DNS security worldwide.

I am seeking a response from individuals with expertise and experience in the mentioned subject, and I would be grateful if you could provide feedback.

Answer 1

Something here could help.

https://learn.microsoft.com/en-us/windows-server/networking/dns/dnssec-overview

--please don't forget to close up the thread here by marking answer if the reply is helpful--