You have configured Automatic Static NAT on an internal host-node object. You clear the box
Translate destination on client site from Global Properties > NAT. Assuming all other NAT settings
in Global Properties are selected, what else must be configured so that a host on the Internet can
initiate an inbound connection to this host?

A.
A proxy ARP entry, to ensure packets destined for the public IP address will reach the Security
Gateway’s external interface.

B.
No extra configuration is needed.

C.
The NAT IP address must be added to the external Gateway interface anti-spoofing group.

D.
A static route, to ensure packets destined for the public NAT IP address will reach the
Gateway’s internal interface.

Explanation: