From a security perspective, which of the following is a best practice to configure a Domain Name
Service (DNS) system?

A.
Configure secondary servers to use the primary server as a zone forwarder.

B.
Block all Transmission Control Protocol (TCP) connections.

C.
Disable all recursive queries on the name servers.

D.
Limit zone transfers to authorized devices.