When using DNSSEC, which records and configurations must be considered in zone delegation?

• A. DS records and trust anchors are irrelevant to delegation
• B. A/AAAA records alone determine delegation
• C. NS records are sufficient for delegation without DNSSEC
• D. DS records and trust anchors must be configured as part of DNSSEC-enabled delegation

Answer: (D)