CompTIA Security+ (SY0-401) — Question 19

Which of the following network architecture concepts is used to securely isolate at the boundary between networks?

Answer options

• A. VLAN
• B. Subnetting
• C. DMZ
• D. NAT

Correct answer: C

Explanation

The correct answer is C, DMZ, as it serves as a buffer zone between an internal network and external networks, allowing secure access to services while isolating sensitive internal resources. VLANs and subnetting are used for segmentation but do not inherently provide isolation at the boundary like a DMZ does. NAT, while useful for address translation, does not address isolation in the context of network boundaries.