Which of the following is a reason to implement security logging on a DNS server?

Security logging records events for auditing and detection - it does not actively block or prevent malware attacks on the server.

Measuring DNS server performance is the purpose of performance monitoring and operational logs, which is distinct from the security logging objective.

Unauthorized zone transfers allow an attacker to obtain a complete copy of a DNS zone's resource records, enabling reconnaissance and targeted attacks; security logging captures all transfer requests so administrators can identify attempts from unauthorized sources and respond accordingly.

Recording the total number of queries resolved is an operational or capacity metric and does not serve a security monitoring function.