Which two statements are true about servers in a demilitarized zone (DMZ)? (Choose two.)
Which two statements are true about servers in a demilitarized zone (DMZ)? (Choose two.)
Servers in a demilitarized zone (DMZ) can be accessed by traffic from the internet, making them publicly accessible for services such as web servers, mail servers, and FTP servers. They are isolated from the internal network to add a layer of security, preventing direct access to the internal network and limiting potential exposure to attacks. The DMZ acts as a buffer zone between the untrusted external network (internet) and the trusted internal network.
(pg. 57) These servers and resources are segregated and are given limited access to the LAN to ensure they can be accessed over the Internet but the internal LAN cannot. As a result, the DMZ method makes it very difficult for a hacker to gain direct access to organizational data and internal servers via the Internet.