Which CORRECTLY Pairs a Security Layer and an Available Technology

Which CORRECTLY pairs a security layer and an available technology in realizing the defense-in-depth principle?

A) Data security -- Access Control List (ACL) on border routers
B) Application security -- Hardening intermediary devices
C) Host security -- Anti-virus protection
D) Internal network security -- Corporate-wide data encryption
E) Perimeter security -- Network segmentation (e.g., subnets, VLANs)