Arrange the steps required to configure and verify a Source NAT (Dynamic IP and Port) rule on a next-generation firewall for internal clients accessing the Internet.

### Why this is right The rule must identify the original traffic before its translation can be configured. The firewall changes then need to be saved and committed before the workstation test can verify the result. ### The order 1. **Define the Internal source zone and Internet destination zone**: These describe the traffic the rule should match. 2. **Choose the outbound interface and matching service and addresses**: These complete the original-packet conditions described in the lab. 3. **Configure Dynamic IP and Port source translation using the interface address**: This specifies the translated source behavior. 4. **Save the rule and commit the changes**: The lab requires a commit for the configuration to take effect. 5. **Test Internet access from the Internal workstation**: The test checks whether the configured path works. ### Terms - **Commit**: Apply configured changes on the firewall. ### Remember Configure, commit, then test; an uncommitted rule is not yet the completed lab configuration.