A.iptables ~t nat ~A POSTROUTING ~o eth0 ~j SNAT --to~source 192.0.2.11

B.iptables ~t nat ~A PREROUTING ~i eth0 ~j SNAT --to~source 192.0.2.11

C.iptables ~t nat ~A POSTROUTING ~i eth0 ~j DNAT --to~source 192.0.2.11

D.iptables ~t mangle ~A POSTROUTING ~i eth0 ~j SNAT -to~source 192.0.2.11

E.iptables ~t mangle ~A POSTROUTING ~0 eth0 ~j SNAT -to~source 192.0.2.11

A.Limit valid-x509

B.SSLRequestClientCert always

C.Require valid-x509

D.SSLVerifyClient require

E.SSLPolicy valid-client-cert

A.Both servers mutually verify their X509 certificates.

B.Both servers verify appropriate DANE records for the labels of the NS records used to delegate the transferred zone.

C.Both servers use a secret key that is shared between the servers.

D.Both servers use DNSSEC to mutually verify that they are authoritative for the transferred zone.

A.host

B.group

C.shadow

D.passwd

E.service