What should be done if you needed to create a policy to control DNS zone transfers, but allow DNS queries to go through?
Which step would be needed before creating a policy that would block DNS zone transfers while allowing DNS queries to pass?