Security ArchitectureQuestion 28 of 100
Which network area sits between the internet and the internal network to host public-facing services?
a.Intranet
b.VPN concentrator
c.Air gap
d.Screened subnet (DMZ)
Explanation
A screened subnet, historically called a DMZ, isolates public-facing servers from the internal network. If a public host is compromised, the internal network remains protected by an additional boundary. Firewalls control traffic on both sides.
Practice all 100 questions free — no signup required.
Related questions on this topic
- Which security model assumes no user or device is trusted by default, even inside the network perimeter?
- Layering multiple independent security controls so that one failure does not cause a breach is called:
- Dividing a network into isolated zones to limit the spread of an attack is known as:
- Which cloud model gives the customer the most control over the operating system and applications while the provider manages the physical hardware?
- In cloud computing, which concept defines who is responsible for securing which layers of the stack?
- Which technology allows multiple isolated operating systems to run on a single physical host?
Last reviewed: · editorial process
PrepPass Editorial Team · Verified against CompTIA Security+ (SY0-701) · How we review