Explanation/Reference:
C: Restrict access from the Internet to the servers on the DMZ to specific server IP addresses only.
For example, you might only allow users to access the webmail servers from outside.
Zone: Untrust to DMZ
D: Set the Destination Address to the Public web server address object you created earlier. The public web server address object references the public IP address-23.54.6.10-of the web server that is accessible on the DMZ.
References: https://www.paloaltonetworks.com/documentation/60/pan-os/pan-os/getting-started/set-up- basic-security-policies