Developers need to test a web application in the staging AWS account using publicly resolvable subdomains under the company domain example.com (which is hosted in a production account). Developers can manage Route 53 in staging but cannot access production resources. What combination of steps will let developers create records under example.com from the staging account? (Choose two.)

To allow developers in the staging account to manage subdomains under example.com without accessing the production account, a delegation of authority is required. First, a public hosted zone for staging.example.com must be created in the staging account. This zone will hold the DNS records for the staging environment. Second, the production example.com hosted zone needs an NS (Name Server) record that delegates staging.example.com to the name servers of the newly created public hosted zone in the staging account. This delegation ensures that DNS queries for staging.example.com are directed to the staging account's Route 53. Creating a private hosted zone in staging would not allow public resolution. Creating an example.com hosted zone in staging or an NS record in the reverse direction would not achieve the desired delegation.