Information Technology Specialist (ITS) Cybersecurity Practice Exam

Which technology allows users to access an untrusted network without compromising the internal network?

1. Firewall

2. VPN

3. DMZ

4. Proxy server

The correct answer is: DMZ

The technology that allows users to access an untrusted network without compromising the internal network is a DMZ, or Demilitarized Zone. A DMZ acts as a buffer zone between an internal network and an external network, such as the internet. It enables an organization to expose certain services or resources to the internet while keeping the internal network protected. By placing public-facing servers in the DMZ, such as web servers or email servers, organizations can ensure that any potential threats from the external network are contained within the DMZ, preventing them from reaching the internal network. This approach enhances security because the devices in the DMZ can be monitored and controlled more closely, reducing the risk of unauthorized access to sensitive internal data. In contrast, while VPNs create secure connections over untrusted networks, they still allow full access to the internal network for the users connected through the VPN, which can pose risks. Firewalls control traffic between networks but do not inherently provide a zone for exposure to the internet. Proxy servers act as intermediaries for requests from clients seeking resources from other servers but are not specifically designed to isolate or buffer networks like a DMZ.