DNS forwarders or root hints

I have a DNS server on a NAT’ed side of my firewall, serving my internal network. Where do I place the IP addresses of my ISP DNS servers? When I go to the DNS properties there are two tabs, “Forwarders” and “Root Hints” and both seem to work? Looking for advice….