Not an apex domain
The domain iserver-si.mail.protection.outlook.com is not the root of its zone.
Instead, try zone transfer on mail.protection.outlook.com .
Instead, try zone transfer on mail.protection.outlook.com .