Your server at 10.1.2.50 is behind the ScreenOS device. You want to allow access to users from the Internet, but not allow the server to initiate sessions. The interface connected to the network is…

Your server at 10.1.2.50 is behind the ScreenOS device. You want to allow access to users from the Internet, but not allow the server to initiate sessions. The interface connected to the network is on a /30 subnet and is in the "Internet" zone. Your ISP has provided you with another /30 public subnet you can use for NAT. Which form of NAT would you use?