Which of the following technologies allows multiple logical subnets to span an entire physical switched network?

ARP (Address Resolution Protocol) maps IP addresses to MAC addresses within a single broadcast domain and is not used for spanning logical subnets.

A DMZ (Demilitarized Zone) is a perimeter network that provides an additional layer of security for services exposed to an untrusted network, not a technology for creating logical subnets across switches.

VLANs (Virtual Local Area Networks) allow for the logical segmentation of a physical switched network into multiple broadcast domains, meaning different logical subnets can exist on the same physical switches. This technology enables administrators to group devices into separate networks regardless of their physical location, spanning multiple switches if configured with trunking.

A VPN (Virtual Private Network) creates a secure, encrypted connection over a public network, allowing remote users to securely access a private network, but it does not segment a physical switched network into multiple logical subnets.