Which of the following statements about central NAT are true? (Choose two.)
A . IP tool references must be removed from existing firewall policies before enabling central NAT
B . Central NAT can be enabled or disabled from the CLL only.
C . Source NAT, using central NAT, requires at least one central SNAT policy.
D . Destination NAT, using central NAT, requires a VIP object as the destination address in a firewall
Answer: BC