A corporation has Research and Development (R&D) and IT support teams, each requiring
separate networks with independent control of their security boundaries to support department
objectives. The corporation’s Information Security Officer (ISO) is responsible for providing firewall
services to both departments, but does not want to increase the hardware footprint within the
datacenter. Which of the following should the ISO consider to provide the independent
functionality required by each department’s IT teams?

A.
Put both departments behind the firewall and assign administrative control for each department
to the corporate firewall.

B.
Provide each department with a virtual firewall and assign administrative control to the physical
firewall.

C.
Put both departments behind the firewall and incorporate restrictive controls on each
department’s network.

D.
Provide each department with a virtual firewall and assign appropriate levels of management
for the virtual device.