Where could you put a Web server that should be publicly accessible from the Internet, but should be segmented from the rest of your internal network?

Services typically segmented by a DMZ could include email servers, Web servers, and FTP servers. You are setting up a separate network that is accessible from the Internet by creating a DMZ (demilitarized zone) which makes certain services available to external users while denying access to the rest of your network.