Future Business Leaders of America (FBLA) Cybersecurity Practice Test

What is a DMZ in network architecture?

1. A zone that restricts all internet access

2. A sub-network that separates an internal network from untrusted networks

3. A backup system for internal servers

4. A database for storing sensitive information

The correct answer is: A sub-network that separates an internal network from untrusted networks

A DMZ, or Demilitarized Zone, in network architecture refers to a sub-network that separates an internal network from untrusted networks, primarily the internet. Its primary function is to add an additional layer of security to an organization’s local area network (LAN). In a DMZ, publicly accessible services such as web servers, email servers, and DNS servers can operate in a controlled environment where they are exposed to potential external threats but are isolated from the internal network. This structure allows for careful management of the traffic entering and leaving the internal network while minimizing the risk of an external breach leading to direct access to sensitive internal resources. By segmenting the network, if a server in the DMZ is compromised, the attacker would still face additional barriers before gaining access to the more secure internal network. In contrast, the other options do not accurately describe the purpose or function of a DMZ. The zone that restricts internet access is not a DMZ; rather, it implies a more restrictive network environment. A backup system describes a data recovery mechanism, unrelated to the separation of networks. Similarly, a database for storing sensitive information does not define a DMZ, as it pertains to data storage rather than network architecture and security.