In general, servers that are facing the Internet should be placed in a demilitarized zone (DMZ). What is MAIN purpose of the DMZ?

Question

Options

• AReduced risk to internal systems.
• BPrepare the server for potential attacks.
• CMitigate the risk associated with the exposed server.
• DBypass the need for a firewall.

• A
  91% (21)
• C
  4% (1)
• D
  4% (1)

Explanation

A DMZ acts as a buffer zone between the public internet and an organization's internal network, so that if an internet-facing server is compromised, the attacker cannot directly reach sensitive internal systems - this isolation is the primary purpose, making A correct.

• B is wrong because a DMZ doesn't "prepare" a server for attacks; it doesn't harden the server itself, it isolates it.
• C is wrong because mitigating risk to the exposed server is a secondary effect - the DMZ's main goal is protecting internal systems, not the server sitting in the DMZ itself.
• D is wrong because a DMZ typically requires firewalls (usually two of them - one between the internet and the DMZ, one between the DMZ and the internal network), not bypasses them.

Memory tip: Think of a DMZ like the airlock on a spacecraft - if the outer door is breached, the inner door still protects the crew. The airlock (DMZ) exists to protect what's inside, not to protect itself.

No community discussion yet for this question.