100-160 Question 83
Single answerA company wants to host its web application securely while minimizing the risk of external threats reaching its internal network. They plan to deploy the application servers in a secure network segment that allows external access but is isolated from internal systems. Which network security architecture component should they use?
- A
Demilitarized Zone (DMZ)
- B
Intrusion Detection System (IDS)
- C
Honeypot
- D
Proxy Server
Show answer and explanation
Correct answer: A
Explanation
The Demilitarized Zone (DMZ) is the correct choice because it is a specialized network segment designed to host external-facing services securely. By isolating these services from the internal network, it minimizes the impact of potential breaches while allowing external users to access the hosted application.
- A. Correct.
A Demilitarized Zone (DMZ) is specifically designed to isolate external-facing services like web servers from the internal network, providing a secure zone to reduce risk while still allowing external access.
- B. Incorrect.
An Intrusion Detection System (IDS) is used to monitor and alert on potential threats but does not isolate or host services. It is not the correct component for securely hosting a web application.
- C. Incorrect.
A honeypot is a decoy system designed to attract attackers and study their behavior. It is not suitable for hosting legitimate web applications.
- D. Incorrect.
A proxy server acts as an intermediary between clients and servers to filter traffic and enhance privacy, but it is not designed to host web applications securely.