Enabling external hosts to connect to your public servers in the DMZ, but not to hosts in the internal LAN, is an example of filtering on the ____.

A. port number
B. protocol
C. source IP address
D. destination IP address

Answer: D