nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #624

What is a demilitarized zone (DMZ)?

The correct answer is A. A type of network security architecture. A DMZ (Demilitarized Zone) is a network security architecture pattern - a subnet that sits between the public internet and the internal private network. It hosts internet-facing services (web servers, mail servers, DNS) that must be publicly accessible while isolating them from…

Network Security Concepts

Question

What is a demilitarized zone (DMZ)?

Options

  • AA type of network security architecture
  • BA type of network topology
  • CA type of physical access control
  • DA type of encryption

How the community answered

(57 responses)
  • A
    89% (51)
  • B
    5% (3)
  • C
    2% (1)
  • D
    4% (2)

Explanation

A DMZ (Demilitarized Zone) is a network security architecture pattern - a subnet that sits between the public internet and the internal private network. It hosts internet-facing services (web servers, mail servers, DNS) that must be publicly accessible while isolating them from the internal network. If a DMZ host is compromised, the attacker still faces another firewall before reaching internal systems. It is not a topology type (B), physical control (C), or encryption method (D). It is achieved through firewall rules and segmentation.

Topics

#DMZ#Network Security#Network Architecture#Firewalls

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice