CCSP · Question #679
When a system needs to be exposed to the public Internet, what type of secure system would be used to perform only the desired operations?
The correct answer is D. Bastion. A bastion is a system that is exposed to the public Internet to perform a specific function, but it is highly restricted and secured to just that function. Any nonessential services and access are removed from the bastion so that security countermeasures and monitoring can be…
Question
When a system needs to be exposed to the public Internet, what type of secure system would be used to perform only the desired operations?
Options
- AFirewall
- BProxy
- CHoneypot
- DBastion
How the community answered
(61 responses)- A2% (1)
- B2% (1)
- C5% (3)
- D92% (56)
Explanation
A bastion is a system that is exposed to the public Internet to perform a specific function, but it is highly restricted and secured to just that function. Any nonessential services and access are removed from the bastion so that security countermeasures and monitoring can be focused just on the bastion's specific duties. A honeypot is a system designed to look like a production system to entice attackers, but it does not contain any real data. It is used for learning about types of attacks and enabling countermeasures for them. A firewall is used within a network to limit access between IP addresses and ports. A proxy server provides additional security to and rulesets for network traffic that is allowed to pass through it to a service destination.
Topics
Community Discussion
No community discussion yet for this question.