In the diagram above, we can see that the public$-$facing $($internet$-$facing$)$ web server is placed in the DMZ while other non$-$public resources are placed behind a second firewall.

This design adheres to which principle?