A perimeter network, or DMZ, is designed specifically for this purpose. It acts as an additional layer of security that separates an internal network from untrusted networks, such as the internet. By placing the web server inside the DMZ, the company ensures that internet traffic cannot reach the internal network directly, but can access the web server. The incorrect answers reference elements that either don't exist (Web Application Firewall Network) or do not primarily serve the purpose of isolating and protecting internal IT resources from the exposure that a web server would have on the internet (Virtual LAN and Network Address Translation).