Getting Started with SQL Server 2008 R2 - Microsoft SQL Server 2008 R2 Administration - page 25

8. On the Build Package page, review the status of building the DAC package file. When
the build is finished, click Finish to close the wizard. Finally, verify that a new DAC
package file was created in the path you specified in step 4.
9. The extracted DAC package file can now be imported to a Data-tier Application project
in Visual Studio. In addition, the DAC package can also be deployed to create a new
data-tier application on an instance of SQL Server, or to upgrade an older version of
an existing data-tier application.
In an ISV-based environment, if the referred .dacpac file is
received from a third-party or an unknown source, then it is
essential to review the file contents that contain the pre and
post schema change scripts. The default practice must include
verification of the package file contents with an anti-virus scanner.