What is the purpose of a DMZ in a network architecture?

• A. To isolate internal resources from external access
• B. To improve internal network throughput
• C. To host public services in an isolated segment, reducing risk to the internal network
• D. To centralize user authentication

Answer: (C)

A DMZ creates a buffer zone where externally accessible services live in their own isolated segment, so they can be reached from outside without giving direct access to the internal network. By placing public services like a web or mail server in this separate area and enforcing strict firewall rules between the DMZ and the internal network, any compromise of those services is less likely to spill over to the trusted internal resources. This configuration lets users reach the necessary public services while preserving the protection of sensitive internal systems.

This isn’t primarily about improving internal throughput or centralizing authentication, and it isn’t meant to isolate internal resources—it's about hosting public-facing services in a controlled, isolated segment to reduce risk to the internal network.