CompTIA: Advanced Security Practitioner (CASP) Exam Prep

Answer: D - A DMZ, or Demilitarized Zone, is an area for placing Web and other servers that serve the general public outside the firewall, therefore isolating them from internal network access. It is inserted as a "neutral zone" between a company's private network and the outside public network.

Key Takeaway: DMZ prevents outside users from getting direct access to a server that has company data. It is an optional and more secure approach to a firewall and effectively acts as a proxy serveras well. Users of the public network outside the company can access only the DMZ host. The DMZ typically holds the company's Web pages so these can be served to the outside world. However, the DMZ provides access to no other company data. In the event that an outside user penetrated the DMZ host's security, the Web pages might be corrupted, but no other company information would be exposed.