Match each firewall term with its description.

### The pairs | Item | Matches | Why | |---|---|---| | Security zone | A group of interfaces or addresses used to simplify policy management | Zones let administrators write rules between network areas instead of memorizing every interface and address. | | Demilitarized zone (DMZ) | A separated network for systems that communicate with less-trusted networks | A DMZ places public-facing systems apart from internal clients and servers. | | Implicit deny | The default denial when no policy rule matches | The policy denies unmatched traffic after the listed rules have been checked. | ### Terms - **DMZ**: Demilitarized Zone. A separated network for systems that need communication with less-trusted networks. ### Remember Zones group networks, a DMZ separates exposed systems, and implicit deny handles unmatched traffic.