Which component provides controlled access to publicly available servers hosted within the organization's network?

Which component provides controlled access to publicly available servers hosted within the organization's network?

• A. DMZ
• B. Data Interface
• C. Bastion Host
• D. Cryptography

Answer: (A)

A DMZ acts as a buffer zone that hosts publicly accessible servers and enforces access control at the network boundary. By placing web, mail, or other public services in this isolated zone, external users can reach those servers without gaining direct access to the internal network. Firewalls on the DMZ boundary regulate traffic, log activity, and restrict what can flow between the internet, the DMZ, and the internal network, helping contain any compromise. If a server in the DMZ is breached, attackers don’t automatically reach internal systems, because the internal network remains behind additional security controls. A Bastion Host can be used within or at the edge of the DMZ as a controlled access point to internal resources, but the DMZ itself is the mechanism that provides the controlled exposure of public servers. Cryptography and vague data interfaces don’t establish this boundary or manage access to exposed services.

A DMZ acts as a buffer zone that hosts publicly accessible servers and enforces access control at the network boundary. By placing web, mail, or other public services in this isolated zone, external users can reach those servers without gaining direct access to the internal network. Firewalls on the DMZ boundary regulate traffic, log activity, and restrict what can flow between the internet, the DMZ, and the internal network, helping contain any compromise. If a server in the DMZ is breached, attackers don’t automatically reach internal systems, because the internal network remains behind additional security controls. A Bastion Host can be used within or at the edge of the DMZ as a controlled access point to internal resources, but the DMZ itself is the mechanism that provides the controlled exposure of public servers. Cryptography and vague data interfaces don’t establish this boundary or manage access to exposed services.