Which of the following tools can be used to perform a zone transfer?

NSLookup can perform zone transfers using the 'ls -d domain' command to retrieve all DNS records from an authoritative name server.

Finger is a protocol used to query user account information on remote systems and has no DNS zone transfer capability.

Dig performs zone transfers using the 'dig axfr domain @nameserver' syntax and is a primary command-line tool used for this purpose.

Sam Spade is a Windows-based network reconnaissance utility that includes a built-in zone transfer feature for DNS enumeration.

Host performs zone transfers using the 'host -l domain nameserver' command to list all records in a DNS zone.

Netcat is a general-purpose TCP/UDP networking utility for port scanning and data transfer, not designed for DNS queries or zone transfers.

Neotrace is a visual traceroute tool that maps network hop paths and does not support DNS zone transfer operations.