Your company has a main office and a branch office.The network contains two DNS servers named DNS1 and DNS2.DNS1 is located in the main office. DNS1 hosts a primary standard zone named contoso.com. The contoso.com zone is configured to use DNSSEC.DNS2 is located in the branch office. DNS2 is a caching-only DNS server. You need to ensure that client computers in the branch office can receive authoritative responses to queries for contoso.com if a WAN link fails. DNSSEC security must be maintained.What should you configure on DNS2 for contoso.com？（）

• A、a conditional forwarder
• B、a secondary zone
• C、a zone delegation
• D、an Active Directory-integrated stub zone