__________ firewall architecture uses two NICs with a screening router inserted between the host and the untrusted network.

Packet filtering refers to the router-level technique of inspecting packets by header fields, not a named firewall architecture that includes a dual-NIC host.

A screened host firewall uses a packet-filtering screening router that sits in front of a bastion host. The bastion host has two NICs - one facing the screening router and one facing the internal trusted network - so all inbound traffic is filtered by the router before reaching the host, which then applies application-layer controls.

A dual-homed host uses two NICs to connect directly to both the trusted and untrusted networks but does not include a separate screening router between itself and the external network.

A screened subnet (DMZ) uses two screening routers to isolate a middle network segment, placing the bastion host inside that DMZ rather than behind a single router.