[gejlug]

Brianna has three servers located in a DMZ, using public IP addresses that need to be accessed by her internal networks. Brianna's internal network use class B IP addresses, per RFC 1918. Internal networks access the Internet, using Dynamic NAT behind the external IP address of her Security Gateway. What is the best way to configure access for the DMZ servers?
A. Configure Manual NAT rules to translate the internal networks, when connecting to the DMZ servers.
B. Configure Dynamic NAT for the DMZ interface of the Security Gateway.
C. Configure Static NAT rules for the DMZ servers.
D. Configure Manual NAT rules to translate the DMZ servers, when connecting to the internet.

Testking answer is B, but I think it should be A, because the question is how to access the DMZ servers from internal networks, and B answer with Dynamic (Hide) NAT is only meant for outgoing traffic. What do you think ?

thanks