Cisco Certified Network Associate (CCNA) 200-301 — Question 1101

The correct answer is D. Option D: is used on hosts that communicate only with other internal hosts This option keeps traffic private / properly secured as required.