What should be done if you needed to create a policy to control DNS zone transfers, but
allow DNS queries to go through?

A.
Nothing, the pre-defined DNS service will work properly as defined

B.
Create a custom service using TCP port 53 as the destination port

C.
The predefined DNS service does not allow this type of configuration

D.
Create a custom service only using UDP port 53 as the destination port

Explanation: