A network administrator is using DNAT to map two servers to one public IP address. Traffic will be directed to a specific server based on the application, where Host A (10.1.1.100) receives HTTP traffic and Host B (10.1.1.101) receives SSH traffic.

Which two sets of Security policy rules will accomplish this configuration? (Choose two.)

Select all that apply.

• A

  Source: Untrust (Any)
  Destination: Untrust
  Application(s): web-browsing
  Action: allow

• B

  Source: Untrust (Any)
  Destination: Trust
  Application(s): web-browsing, ssh
  Action: allow

• C

  Source: Untrust (Any)
  Destination: DMZ
  Application(s): web-browsing
  Action: allow

• D

  Source: Untrust (Any)
  Destination: DMZ
  Application(s): ssh
  Action: allow