A public address and port are mapped to a private address and port for an external user to reach a local server. What additional configuration is still required according to the lesson?

### Why this is right Destination translation changes where the traffic is directed, but the security policy determines whether it is allowed. Address translation and authorization are separate functions. ### The concept Destination NAT, commonly called port forwarding, maps a public address and port to a private server address and port. A firewall still checks the traffic against its security rules. This separation prevents administrators from treating every translated connection as automatically trusted. ### The other options - **B. A rule that disables all firewall inspection**: disabling inspection is not the required permission and would undermine traffic control. - **C. A source translation rule that replaces the server**: source NAT changes the source address, not the destination mapping needed here. - **D. No additional configuration, because translation permits the connection**: this incorrectly treats NAT as an allow action. ### Terms - **NAT**: Network Address Translation. A method of changing network addresses. - **Port forwarding**: Mapping an external address and port to an internal address and port. ### Remember NAT changes addresses; policy allows or denies traffic.