You have three servers located in a DMZ, using private IP addresses. You want internal users
from 10.10.10.x to access the DMZ servers by public IP addresses. Internal_net 10.10.10.x is
configured for Hide NAT behind the Security Gateway’s external interface.

What is the best configuration for 10.10.10.x users to access the DMZ servers, using the DMZ
servers’ public IP addresses?

A.
When connecting to the Internet, configure manual Static NAT rules to translate the DMZ
servers.

B.
When connecting to internal network 10.10.10.x, configure Hide NAT for the DMZ network
behind the Security Gateway DMZ interface.

C.
When the source is the internal network 10.10.10.x, configure manual static NAT rules to
translate the DMZ servers.

D.
When trying to access DMZ servers, configure Hide NAT for 10.10.10.x behind the DMZ’s
interface.

Explanation: