Firewall reasoning, not vocabulary guessing.

This assessment checks whether you can separate NAT, routing, firewall policy, zones, management access, monitoring paths, and app-private database dependencies.