One which interface would you configure a VIP for translating inbound traffic destined for the partner servers?

A.
E1

B.
E2

C.
E7

D.
E8

E.
You cannot use a VIP in this environment; a VIP must be configured in the Untrust zone.

Explanation:
A virtual IP (VIP) address maps traffic received at one IP address to another address based on the destination port number in the TCP or UDP segment header. The NetScreen device forwards incoming traffic destined for a VIP to the host with the address to which the VIP points (destination address). You need the following information to define a Virtual IP:
The IP address for the VIP must be in the same subnet as an interface in the Untrust zone or-on some
NetScreen devices-can even be the same address as that interface13 The IP addresses for the servers that process the requests The type of service you want the NetScreen device to forward from the VIP to the IP address of the host
In this scenario Certkiller D cannot be configured because it resides behind the untrust interface.