which IP addresses slave name servers may connect?

Which BIND option should be used to limit from which IP addresses slave name servers
may connect?

A.
allow-transfer

B.
allow-queries

C.
allow-slaves

D.
allow-zone-transfer

E.
allow-secondary