A server on the DMZ with a private NIC address has network access provided by a NAT policy rule whose Bi-directional check box is selected in the Translated Packet settings for static IP source address translation.

Which Security policy rule must be created to allow bi- directional traffic to and from the DMZ server?

A. a rule for each direction of travel using the pre-NAT server IP address

B. a rule with the post-NAT source IP address

C. a rule for each direction of travel using the post-NAT server IP address

D. a rule with the pre-NAT source IP address