Which of the following firewall rules only denies DNS zone transfers?
deny udp any any port 53
deny ip any any
deny tcp any any port 53
deny all dns packets
DNS operates over TCP and UDP port 53. TCP port 53 is used for zone transfers.