Cam you please clarify the question?
Do you want the Primary DNS server to use Cloudflare as upstream resolvers and the Secondary DNS server to use the Umbrella resolvers? That's a function of the DNS servers themselves.
Either or both DNS servers can hit an outbound NAT rule on a firewall to translate them to to a public IP there - either the interface address or a reserved other public IP that you control.