IP subnetting is the appropriate method when the goal is to limit how many devices can receive private IP addresses in a network. A subnet defines the address range available to hosts. By selecting a smaller prefix, the administrator reduces the number of usable addresses and therefore limits the size of that segment. VLANs divide Layer 2 broadcast domains, but a VLAN still requires an IP subnet to determine address capacity. Static routing controls forwarding paths and does not determine how many hosts can be addressed. NAT translates one IP address or range to another, often between private and public address spaces, but it does not define the internal subnet size. Subnetting is both a network design and security tool because it supports segmentation, reduces broadcast scope, simplifies route control, and aligns security policy boundaries. Proper subnet sizing avoids overly large flat networks that are harder to monitor and contain. Reference/topics: Network Security 3.1, IP subnetting; Network Fundamentals 2.4, NAT.