Changes since SOA version
IXFR is a zone transfer request that returns changes since a specific SOA version. Enter the SOA version to request changes since then.
Not an apex domain
The domain ns2-prodcndns.glbdns.protection.outlook.com is not the root of its zone.
Instead, try zone transfer on glbdns.protection.outlook.com .
Instead, try zone transfer on glbdns.protection.outlook.com .