Which of the following would BEST secure the internal network and allow access to the needed servers?

A network technician is designing a network for a small company. The network technician needs to implement an email server and web server that will be accessed by both internal employees and external customers.

Which of the following would BEST secure the internal network and allow access to the needed servers?
A . Implementing a site-to-site VPN for server access.
B . Implementing a DMZ segment for the server.
C . Implementing NAT addressing for the servers.
D . Implementing a sandbox to contain the servers.

Answer: B