What term describes a segment isolated from the private network by firewalls that accepts Internet connections on designated ports?

What term describes a segment isolated from the private network by firewalls that accepts Internet connections on designated ports?

• A. hardened network
• B. perimeter network
• C. DMZ
• D. screened subnet

Answer: (D)

The concept here is a zone placed between the Internet and the private network to host services that must be reachable from outside, while keeping the internal network protected. This is commonly realized as a DMZ, a buffer area that isolates exposed servers from the private network. A screened subnet is a specific way to implement that idea. It uses two filtering barriers (outer and inner firewalls) to create a subnet that sits between the Internet and the trusted network. Traffic from the Internet passes through the outer firewall into this subnet, where only designated ports are allowed to reach the publicly accessible services. Then, through the inner firewall, connections to the private network are strictly controlled. This arrangement provides a controlled point of exposure and a protective buffer for the internal resources. So, the term screened subnet precisely describes this architecture: a segment isolated from the private network by firewalls that accepts Internet connections on designated ports. While a DMZ is the broader concept, the screened subnet naming emphasizes the two-firewall, port-restricted boundary structure.

The concept here is a zone placed between the Internet and the private network to host services that must be reachable from outside, while keeping the internal network protected. This is commonly realized as a DMZ, a buffer area that isolates exposed servers from the private network.

A screened subnet is a specific way to implement that idea. It uses two filtering barriers (outer and inner firewalls) to create a subnet that sits between the Internet and the trusted network. Traffic from the Internet passes through the outer firewall into this subnet, where only designated ports are allowed to reach the publicly accessible services. Then, through the inner firewall, connections to the private network are strictly controlled. This arrangement provides a controlled point of exposure and a protective buffer for the internal resources.

So, the term screened subnet precisely describes this architecture: a segment isolated from the private network by firewalls that accepts Internet connections on designated ports. While a DMZ is the broader concept, the screened subnet naming emphasizes the two-firewall, port-restricted boundary structure.