A technician needs to make a web server with a private IP address reachable from the Internet. Which of the following should the technician implement on the company firewall?

DOCSIS (Data Over Cable Service Interface Specification) is a standard for cable internet service delivery - it does not perform address translation or expose internal servers.

NAT, specifically static NAT or port forwarding (also called DNAT), allows a firewall to translate incoming Internet traffic destined for a public IP address to the private IP address of the internal web server. This makes the server accessible from the Internet while preserving the private addressing scheme of the internal network.

CIDR (Classless Inter-Domain Routing) is an IP addressing and aggregation method that defines how IP address blocks are allocated - it does not perform address translation.

A VPN creates an encrypted tunnel for secure remote access but does not translate private IP addresses to make a server publicly accessible from the open Internet.