Which of the following would be used to place extranet servers in a separate subnet for security purposes?

Which of the following would be used to place extranet servers in a separate subnet for security purposes?
A. VPN
B. NAT
C. DMZ
D. IDS