CompTIA Network+ (N10-009) — Question 229

A network engineer needs to add a boundary network to isolate and separate the internal network from the public-facing internet. Which of the following security defense solutions would best accomplish this task?

Answer options

• A. Trusted zones
• B. URL filtering
• C. ACLs
• D. Screened subnet

Correct answer: D

Explanation

The correct answer is D, Screened subnet, as it provides a dedicated area that separates the internal network from the external internet, enhancing security. Options A, B, and C do not create a physical boundary and are insufficient for isolating the internal network from external threats.