Which of the following would allow separation between the Internet and the internal network of a company?

Virtual Local Area Networks (VLANs) create separate broadcast domains at Layer 2, enabling administrators to assign Internet-facing and internal devices to distinct logical segments. Access between VLANs can then be tightly controlled through ACLs or firewall policies applied at the Layer 3 boundary, enforcing separation between external and internal traffic without requiring fully separate physical hardware.

Reviewing audit logs is a detective control that records events after they occur and provides no technical barrier or network separation between the Internet and internal systems.

Reviewing system logs offers visibility into system activity but creates no network-level boundary and cannot enforce separation between Internet and internal traffic.

A DMZ describes a network zone architecture placed between two firewalls, but it is the result of a design decision rather than the specific mechanism (such as a VLAN) that enforces the logical separation itself.