A security analyst is studying DNSSEC. Which statement about DNSSEC is correct?

A. replaces TLS certificates entirely B. adds cryptographic validation to DNS data to help prevent forged responses C. encrypts every web page payload D. turns DNS into a file system