When an external client connects to a public IP to reach an internal web server, the firewall uses _____ NAT to modify the packet's destination IP address to the server's private DMZ address.

### Why this is right The lab specifies 172.16.10.10 as the translated destination address for the DMZ web server. ### The concept The translated destination is the server address that receives the forwarded web request after Destination NAT. It is different from the original destination, which is the firewall's Internet-facing address used by the client. The lab applies this target to both HTTP and HTTPS mappings. ### Terms - **Translated destination address**: The destination address in the packet after Destination NAT changes it. ### Remember The client uses the firewall-facing address; the NAT rule forwards the request to 172.16.10.10.