A secunity engineer needs to create a network segment that can be used for servers thal require connections from untrusted networks.

Which of the following should the engineer implement?