Which term refers to the firewall-protected segment that accepts Internet connections on designated ports?

Which term refers to the firewall-protected segment that accepts Internet connections on designated ports?

• A. screened subnet
• B. DMZ
• C. NAC
• D. EAPoL

Answer: (A)

The idea being tested is a perimeter network that sits between the Internet and your internal network, specifically designed to host services that must be reachable from outside while being protected by firewall filtering. A screened subnet is exactly that concept: a subnet placed behind screening devices that separates public-facing services from the internal network, with firewall rules allowing only the necessary ports and protocols. This arrangement creates a buffer so that even if a service in this zone is compromised, access to the internal network remains restricted. In practice, a DMZ is the commonly described outcome of a screened-subnet design—it's the same idea, a zone for publicly accessible services that is protected by firewalls. However, the term screened subnet emphasizes the architectural approach of using filtering boundaries to control traffic into and out of the segment. The other terms don’t describe this firewall-protected perimeter segment. NAC focuses on enforcing access policies on devices before they can connect to the network, and EAPoL relates to authentication signaling at the network access layer.

The idea being tested is a perimeter network that sits between the Internet and your internal network, specifically designed to host services that must be reachable from outside while being protected by firewall filtering. A screened subnet is exactly that concept: a subnet placed behind screening devices that separates public-facing services from the internal network, with firewall rules allowing only the necessary ports and protocols. This arrangement creates a buffer so that even if a service in this zone is compromised, access to the internal network remains restricted.

In practice, a DMZ is the commonly described outcome of a screened-subnet design—it's the same idea, a zone for publicly accessible services that is protected by firewalls. However, the term screened subnet emphasizes the architectural approach of using filtering boundaries to control traffic into and out of the segment.

The other terms don’t describe this firewall-protected perimeter segment. NAC focuses on enforcing access policies on devices before they can connect to the network, and EAPoL relates to authentication signaling at the network access layer.