A Cisco router is configured with both Static NAT for a server and Dynamic NAT with PAT for internal clients. If an internal client attempts to access the internet, and simultaneously an external user tries to reach the statically NATed server from the internet, which NAT translation typically occurs first when traffic *exits* the router, assuming the NAT configurations are correct?

Static NAT is a one-to-one mapping that translates a fixed public IP address to a private IP address, primarily used for allowing external users to access an internal server. When an external user attempts to reach the statically NATed server, the router receives the incoming packet on its external interface, destined for the server's public IP address. The router performs Destination NAT by translating the public destination IP address in the packet header to the server's private internal IP address. This translation happens very early in the router's packet processing path, specifically before the router performs its routing lookup to determine how to forward the packet to the internal server. After the destination is translated, the packet is routed internally and then exits the router's internal interface towards the server.