After implementing Static Address Translation to allow Internet traffic to an internal Web Server on
your DMZ, you notice that any NATed connections to that machine are being dropped by antispoofing protections. Which of the following is the MOST LIKELY cause?

A.
The Global Properties setting Translate destination on client side is checked. But the topology
on the DMZ interface is set to Internal – Network defined by IP and Mask. Uncheck the Global
Properties setting Translate destination on client side.

B.
The Global Properties setting Translate destination on client side is unchecked. But the
topology on the external interface is set to Others +. Change topology to External.

C.
The Global Properties setting Translate destination on client side is checked. But the topology
on the external interface is set to External. Change topology to Others +.

D.
The Global Properties setting Translate destination on client side is unchecked. But the
topology on the DMZ interface is set to Internal – Network defined by IP and Mask. Check the
Global Properties setting Translate destination on client side.

Explanation: