Any device directly exposed to the internet or another untrusted network which may or may not be a firewall is known as what?

Any device directly exposed to the internet or another untrusted network which may or may not be a firewall is known as what?

• A. DMZ
• B. Extranet
• C. Bastion Host
• D. Boundary Control

Answer: (C)

A bastion host is a highly secured system placed at the edge of a network, exposed to untrusted networks like the Internet, and acts as a controlled gateway into the internal network. This type of device is designed to withstand attacks and minimize the services it runs, serving as a gateway or jump point for authorized access. It may or may not be a firewall, but its defining role is to be the hardened, exposed entry point at the boundary. A DMZ, by contrast, is a network segment used to host externally accessible services; it’s about the network zone rather than a single device. An extranet refers to a network that connects external partners’ networks, not a boundary device. Boundary control isn’t a standard term for a specific device in this context.

A bastion host is a highly secured system placed at the edge of a network, exposed to untrusted networks like the Internet, and acts as a controlled gateway into the internal network. This type of device is designed to withstand attacks and minimize the services it runs, serving as a gateway or jump point for authorized access. It may or may not be a firewall, but its defining role is to be the hardened, exposed entry point at the boundary.

A DMZ, by contrast, is a network segment used to host externally accessible services; it’s about the network zone rather than a single device. An extranet refers to a network that connects external partners’ networks, not a boundary device. Boundary control isn’t a standard term for a specific device in this context.