Eudemon2000上配置了nat serveglobal 202.106.1.1 inside 10.10.1.1，现在需要禁止公网用户对该服务器的ping访问，以下最好的访问控制策略是哪个?
A.rule deny icmp source any destination 202.106.1.1
B.rule deny icmp source any destination 10.10.1.1
C.rule deny icmp icmp-type ping source any destination 202.106.1.1
D.rule deny icmp icmp-type ping source any destination 10.10.1.1
正确答案是D