What is the purpose of a DMZ in a network?

• A. To host internal management servers
• B. To increase broadcast domains
• C. To host public-facing services with controlled access to the internal network
• D. To consolidate storage

Answer: (C)

A DMZ is a buffer network segment placed between the untrusted public internet and the trusted internal network. Its purpose is to host services that must be reachable from outside while keeping the internal network protected. By locating public-facing servers (like web, mail, or DNS) in the DMZ and applying strict access controls, you allow external users to reach those services but limit any direct access to internal resources. If a DMZ server is compromised, the extra layer makes it harder for attackers to move into the internal network.

This aligns with hosting public-facing services with controlled access to the internal network. It isn’t about hosting internal management servers, it doesn’t aim to increase broadcast domains, and it isn’t for storage consolidation.