which IP addresses slave name servers may connect?

Which BIND option should be used to limit from which IP addresses slave name servers may
connect?

A.
allow-zone-transfer

B.
allow-transfer

C.
allow-secondary

D.
allow-slaves

E.
allow-queries