What statement related to a Virtual Demilitarized Zone (DMZ) is true?

A.
A virtual DMZ can support multiple trust zones.
B.
DMZ virtual machines should be in separate sub-networks.
C.
Virtual DMZ subnets do not use a firewall to protect traffic.
D.
Trusted nodes in the DMZ are not accessible from outside networks.