In order to move data from an unsecure WAN to a secure LAN, you typically begin by segmenting a piece of your LAN into a $\_\_\_\_\_\_\_\_\_\_,$ which sits on the outside of your private network facing the public Internet. Servers in this area provide public$-$facing access to the organization, such as public websites.

A$.$

virtual private network $($VPN$)$

B$.$

segment

C$.$

botnet

D$.$

demilitarized zone $($DMZ$)$