The general philosophy for DMZ's is that:

The correct answer is A. any system on the DMZ can be compromized because it's accessible from the Internet. The foundational security philosophy of a DMZ (Demilitarized Zone) is that any system placed within it should be treated as potentially compromised, because DMZ systems are intentionally exposed to the Internet to provide public-facing services (e.g., web servers, mail relays…

Submitted by kevin_r· Apr 18, 2026Network and Communications Security

Question

Options

Aany system on the DMZ can be compromized because it's accessible from the Internet.
Bany system on the DMZ cannot be compromized because it's not accessible from the
Csome systems on the DMZ can be compromized because they are accessible from the
Dany system on the DMZ cannot be compromized because it's by definition 100 percent safe

How the community answered

(21 responses)

A
90% (19)
C
5% (1)
D
5% (1)

Explanation

The foundational security philosophy of a DMZ (Demilitarized Zone) is that any system placed within it should be treated as potentially compromised, because DMZ systems are intentionally exposed to the Internet to provide public-facing services (e.g., web servers, mail relays, DNS). Since they are accessible from untrusted networks, they have a higher attack surface and cannot be considered fully secure. This philosophy drives the principle that DMZ hosts should never be trusted to access internal network resources without strict controls, and sensitive data should never be stored on DMZ systems. The entire internal network is protected by assuming DMZ systems are already breached.

Topics

#DMZ#Network security#Perimeter defense#Risk management

Community Discussion

No community discussion yet for this question.

Full SSCP Practice