An attacker tries to break into a DNS server to redirect traffic to his website. After multiple unsuccessful attempts, the attacker decides to take a more basic approach and starts by sending a request to a valid DNS server to resolve the name of his website. How can the attacker's goal of redirecting traffic be thwarted?

Group of answer choices

Install anti$-$DNS hijacking software on all DNS servers under the organization's control.

Ensure all DNS zone transfers use a tunnel to encrypt traffic between DNS servers.

Validate DNS responses to ensure they are from an authoritative source.

Enable DNS Guard on all internet$-$facing interfaces on the DNS server.