Which network security architecture feature is designed to purposely expose some of an organization's services to untrusted networks?

Question

Options

• Anetwork zone
• Bsecurity zone
• Cdemilitarized zone
• Dmilitary zone

• B
  4% (1)
• C
  92% (22)
• D
  4% (1)

Explanation

A demilitarized zone (DMZ) is a network segment intentionally positioned between an untrusted external network (like the internet) and a trusted internal network. It hosts publicly accessible services - web servers, email gateways, DNS - so that external users can reach them without ever touching the internal corporate network. If a DMZ host is compromised, the attacker is still isolated from internal systems by a second firewall layer.

Why the distractors are wrong:

• A. Network zone - a generic term for any logical network segment; it doesn't imply intentional exposure to untrusted networks.
• B. Security zone - also a general concept (grouping assets by trust level), not specifically about exposing services externally.
• D. Military zone - not a real networking term; it's a distractor playing on the word "demilitarized."

Memory tip: Think of the real-world DMZ between North and South Korea - a buffer strip between two opposing sides where limited activity is permitted but neither side fully controls it. In networking, the DMZ sits between the hostile internet and your safe internal network, allowing controlled exposure.

No community discussion yet for this question.