The main idea being tested is how a firewall acts as a gatekeeper for a network by controlling what traffic is allowed to pass through. A firewall sits at the boundary between trusted and untrusted networks and uses rules to inspect data packets, deciding which ones to permit and which to block. Its goal is to prevent unauthorized access to systems or networks while still letting legitimate communications happen, and it can be hardware or software-based, applying policies on ports, protocols, IP addresses, or connection states. This protective role helps defend against external intrusions, surveillance, and various kinds of network abuse, and it can also log activity for later review. The other options describe different IT tasks—printer sharing, email spam filtering, and wireless signal optimization—not the security-focused filtering and access control that a firewall provides.

Geographic scope distinguishes common network types. A Campus-Area Network is meant to interconnect several local networks within a limited area, such as a university campus, corporate campus, or military base. It provides high-speed communication and shared services across multiple buildings, acting as the backbone that links various campus LANs. This makes it larger than a single building LAN but smaller than a Metropolitan Area Network that spans a city. The description “within a limited geographic area, such as a campus or military base” precisely captures this idea, which is why it’s the best fit. In contrast, a Home-Area Network is confined to a residence, a Personal-Area Network covers devices close to a person, and a Metropolitan-Area Network covers a broader, city-wide area.

The function of a DNS cache on a client is to store recent domain-name to IP-address mappings locally so lookups can be resolved quickly without repeatedly contacting a DNS server. When you visit a site, your device resolves the domain to an IP address; if that address is already in the cache and still valid (not expired by its TTL), the system can use it right away, which speeds up the connection and reduces network traffic. Each cached entry has a time-to-live, after which it expires and must be looked up again to ensure the address is still correct. The cache may also store negative results (domains that don’t exist) to avoid repeated failed lookups, which is another efficiency aid. This purpose is different from storing credentials, blocking untrusted domains, or directing email routing.

Network types are categorized by geographic scope, from small to large. A Campus-Area Network specifically connects multiple buildings within a campus—like a university or corporate campus—using high-capacity links and shared infrastructure to act as one campus-wide network. This places CANs between a single LAN (which stays within one location) and broader scope options like MANs (city-wide) or WANs (country or global). Because the question targets the term that denotes a campus-scale network, this category best fits that description, making it the correct choice.