Cisco Certified Network Associate (CCNA) 200-301 — Question 1029

The correct answer is B. Option B: to shield internal network devices from external access This option keeps traffic private / properly secured as required.