Which two steps should the administrator take to allow access to all VMs from the Organization Network?

An administrator needs to deploy a vApp with multiple VMs but has been allocated only one
external IP address by the Cloud Administrator.
Which two steps should the administrator take to allow access to all VMs from the Organization
Network? (Choose two.)

A.
Enable port forwarding using the external IP address of the vShield Edge device.

B.
Enable IP Translation mapping the internal IPs to external IP addresses.

C.
Enable IP Masquerading.

D.
Enable IPsec tunneling between the Organization Network and the vApp network.