You recertify added NAT in your environment and now users are complaining about not being able to access the Internet.

Which two parameters would you configure to verify that NAT is working correctly? (Choose two.)

A.
security trace-options flag flow basic

B.
security flow trace-options flag packet-drops

C.
security nat trace-options flag all

D.
security nat source/destination trace-options flag all