Which of the following would BEST accomplish this?

The named service needs to be secured. Which of the following would BEST accomplish this?

A.
Run named in a chroot jail.

B.
Run named in UDP mode only.

C.
Run named on a non-standard port.

D.
Run named as root.