A DMZ is typically used to host which type of resources?

• A. Publicly accessible servers such as web and mail gateways
• B. Internal database servers
• C. Private file shares
• D. Management consoles

Answer: (A)

A DMZ acts as a buffer zone to host resources that must be reachable from the Internet while keeping the internal network protected. By placing publicly accessible servers—such as web servers and mail gateways—in the DMZ, these services can handle external requests without exposing sensitive internal systems directly. If a DMZ server is compromised, the attacker faces an additional barrier before reaching internal resources, thanks to separate firewalls and restricted pathways.

Internal databases, private file shares, and management consoles typically hold sensitive data or control critical infrastructure, so they are kept behind the internal network with stricter access controls. Exposing them directly in the DMZ would increase risk by giving attackers a foothold closer to valuable assets.