Which statement best describes a non-authoritative DNS server?

Which statement best describes a non-authoritative DNS server?

• A. It caches information from authoritative servers.
• B. It holds the original data for a domain.
• C. It hosts the domain's zone file.
• D. It signs DNS responses with DNSSEC.

Answer: (A)

Non-authoritative DNS servers act as caches and resolvers rather than as the source of truth for domain data. They store responses learned from authoritative servers and answer queries using that cached information, until the records’ TTL expires or new data is needed. They don’t hold the original domain data or the zone file itself—that role belongs to authoritative servers. They also don’t sign DNS responses; signing DNS data is done by the authoritative zone (and, if enabled, validated by resolvers), not by the non-authoritative server.

Non-authoritative DNS servers act as caches and resolvers rather than as the source of truth for domain data. They store responses learned from authoritative servers and answer queries using that cached information, until the records’ TTL expires or new data is needed. They don’t hold the original domain data or the zone file itself—that role belongs to authoritative servers. They also don’t sign DNS responses; signing DNS data is done by the authoritative zone (and, if enabled, validated by resolvers), not by the non-authoritative server.