Which term describes a network segment exposed to the internet that isolates critical internal resources?

• A. Honeynet
• B. Extranet
• C. Demilitarized Zone
• D. Intranet

Answer: (C)

A Demilitarized Zone is a buffer network segment placed between the Internet and an organization’s internal network. It hosts services that must be reachable from outside (like public web or mail servers) while keeping the core internal resources isolated behind an additional layer of firewall rules. This separation means that if a public service in the DMZ is compromised, attackers still face the DMZ’s defenses and do not automatically gain direct access to sensitive internal systems.

Honeynets are decoy systems meant to lure attackers, not a general-purpose exposed segment for legitimate public services. An extranet extends part of the internal network to trusted external parties, but still isn’t the standard “exposed segment that isolates internal resources” concept. An intranet is an internal private network for employees, not exposed to the Internet.