A logical grouping of network resources that share a common security policy or trust level. It is used to segment a network into smaller, more manageable units and to enforce security policies on specific groups of resources. Examples of zones include DMZ, trusted zone, and untrusted zone.