Your network has a single Active Directory domain named westsim.local. All westsim.local authoritative DNS servers are configured to forward DNS requests across a firewall to a public DNS server. All client computers are members of the westsim.local Active Directory domain and are configured to use westsim.local authoritative DNS servers.

A new site in Seattle has just opened. The Seattle site is connected to company headquarters using a virtual private networking $($VPN$)$ connection. Company policy states that all client computers in all sites must receive internet access through a high$-$speed internet connection at company headquarters. You want to supply DNS service at the Seattle site, minimize unnecessary DNS traffic across the VPN connection, and configure DNS appropriately to meet company policy.

What should you do$?($Choose two. Each choice is part of the correct solution.$)$

Install a DNS server in the Seattle site with no primary zones.

Install a westsim.local authoritative DNS server in the Seattle site.

Configure the new DNS server to forward all DNS requests to westsim.local authoritative DNS servers at company headquarters.

Configure the new DNS server to conditionally forward westsim.local DNS requests to westsim.local authoritative DNS servers at company headquarters and to use root hints to resolve all other DNS requests.

Configure the new DNS server to forward all DNS requests across the company firewall to a public DNS server.