A Chief Information Officer wants to ensure that network devices cannot connect to the public Internet and the local network to directly perform firmware updates. The IT team must manually perform the update process by using a portable device. Which of the following architecture types best fits this description?