In network security, what does DMZ stand for?

• A. Digital Market Zone.
• B. Demilitarized Zone.
• C. Demilitarized Zone Environment.
• D. Data Management Zone.

Answer: (B)

Demilitarized Zone is a buffer network between the untrusted network (the internet) and the trusted internal network that hosts public-facing services such as web servers, mail gateways, or DNS servers. The idea is to expose only what’s necessary to the outside world while keeping the internal network protected. Traffic from the internet reaches the DMZ first and is filtered or inspected there; only authorized traffic is allowed to pass deeper into the network, and access from DMZ systems to internal systems is tightly restricted. If a DMZ host is compromised, the attacker doesn’t automatically gain access to the entire internal network, because the DMZ is segmented and protected by firewalls and strict rules.

Other phrases listed aren’t standard terms for this setup. They don’t describe the same protective buffer that the DMZ represents.