Which two methods enable a PC connected to the PartnerNet to connect to a server on DMZ1 but deny it access to both DMZ2 and the Inside network?

Which two methods enable a PC connected to the PartnerNet to connect to a server on DMZ1 but deny it access to both DMZ2 and the Inside network? (Choose two).

A.
Enable port address translation for traffic sourced from the PartnerNet PC to the DMZ1server.

B.
Disable NAT control on DM72 and the Inside interfaces only.

C.
Enable static NAT translation for the DMZ1 server, and then use an ACL to permit the PartnerNet PC traffic to the DMZ1 server.

D.
Disable NAT control on the DMZ1 interface only.

E.
Lower the security level of the DMZ2 interface to 30.

F.
Raise the security level of the PartnerNet interface to 55.