Your company has a main office and a branch office.
The network contains two DNS servers named DNS1 and DNS2.
DNS1 is located in the main office. DNS1 hosts a primary standard zone named contoso.com. The contoso.com zone is configured to use DNSSEC.
DNS2 is located in the branch office. DNS2 is a caching-only DNS server.
You need to ensure that client computers in the branch office can receive authoritative responses to queries for contoso.com if a WAN link fails. DNSSEC security must be maintained.
What should you configure on DNS2 for contoso.com?
A. a conditional forwarder
B. a secondary zone
C. a zone delegation
D. an Active Directory-integrated stub zone
