Which of the following BEST describes the use of network architecture in reducing corporate risks associated with mobile devices?

A closed application model is an endpoint management policy, not a network architecture control, and it has no functional dependency on a DMZ.

Split tunneling actually reduces DMZ security posture by allowing mobile device traffic to bypass the corporate network inspection path, increasing risk rather than reducing it.

Segmentation divides the network into isolated zones so that compromised mobile devices cannot freely access sensitive corporate resources, limiting lateral movement. Combined with DMZ monitoring, traffic from mobile devices is inspected and controlled at a security boundary before reaching internal systems. This layered approach directly addresses corporate risk by containing threats originating from mobile endpoints within a virtualized or segmented network environment.

Placing mobile device management (MDM) applications in an internet-facing DMZ exposes management infrastructure to external threats, which increases corporate risk rather than reducing it.