nerdexam
(ISC)2

CCSP · Question #524

What type of host is exposed to the public Internet for a specific reason and hardened to perform only that function for authorized users?

The correct answer is B. Bastion. A bastion host is a server that is fully exposed to the public Internet, but is extremely hardened to prevent attacks and is usually dedicated for a specific application or usage; it is not something that will serve multiple purposes. This singular focus allows for much more…

Submitted by kim_seoul· Apr 18, 2026Cloud Platform & Infrastructure Security

Question

What type of host is exposed to the public Internet for a specific reason and hardened to perform only that function for authorized users?

Options

  • AProxy
  • BBastion
  • CHoneypot
  • DWAF

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    87% (33)
  • C
    8% (3)
  • D
    3% (1)

Explanation

A bastion host is a server that is fully exposed to the public Internet, but is extremely hardened to prevent attacks and is usually dedicated for a specific application or usage; it is not something that will serve multiple purposes. This singular focus allows for much more stringent security hardening and monitoring.

Topics

#Bastion host#Network security#System hardening#Internet-facing systems

Community Discussion

No community discussion yet for this question.

Full CCSP Practice