Which of the following is a reason to implement security logging on a DNS server?

Recording the number of queries resolved is an operational or capacity-planning metric, not a security objective for DNS logging.

Security logging records events after they occur and does not actively block or prevent malware attacks on the DNS server itself.

Measuring DNS server performance such as query latency and throughput is a function of performance monitoring tools, not security logging.

A zone transfer replicates DNS zone data from a primary to a secondary server; if an unauthorized host requests a zone transfer, the attacker receives a full listing of all hostnames and IP addresses in the zone. Security logging captures the source IP and details of zone transfer requests, enabling administrators to identify and respond to unauthorized enumeration attempts.