Cisco Certified Network Associate (CCNA) 200-301 — Question 100

The correct answer is D. Option D: on hosts that communicate only with other internal hosts This option keeps traffic private / properly secured as required.